Senior ERP Cybersecurity Audit Consultant

exequt MENA; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Benefits offered by this job

One year contract

Job summary

ExeQut is seeking a Senior Consultant in Cybersecurity Audit to join our IT audit team. You will lead assessments of application-level controls across ERP and business applications, including SAP, Oracle, and Microsoft Dynamics, ensuring data integrity and compliance.

You will evaluate SoD, user access design, IT-dependent controls, and remediation actions, aligning findings with COBIT, ISO/IEC 27001, and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).

Qualifications

• Bachelor's degree in CS/IS/AIS or related field.
• 4–6 years in application controls auditing, ERP security, or IT audit.
• Hands-on auditing/configuring SAP, Oracle, or Microsoft Dynamics incl. SoD and access controls.

Responsibilities

• Plan and execute application controls reviews across ERP and business applications (e.g., SAP, Oracle, Microsoft Dynamics).
• Assess segregation of duties (SoD), user access design, and sensitive access; evaluate remediation controls.
• Test automated and IT-dependent controls; evaluate interfaces and data integrity between systems.
• Support cybersecurity audits by linking application findings to broader risk.
• Evaluate controls against COBIT, ISO/IEC 27001 and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Draft findings, risk ratings, and practical recommendations; coordinate with client owners.
• Contribute to methodology and testing tools; share knowledge for application controls.

Skills

Communication skills

Analytical skills

Documentation

Education

Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or related discipline

Tools

SAP

Oracle

Microsoft Dynamics

Job description

ExeQut is seeking a Senior Consultant in Cybersecurity Audit to join our IT audit team. You will lead assessments of application-level controls across ERP and business applications, including SAP, Oracle, and Microsoft Dynamics, ensuring data integrity and compliance.

You will evaluate SoD, user access design, IT-dependent controls, and remediation actions, aligning findings with COBIT, ISO/IEC 27001, and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).