Senior ERP Cybersecurity Audit Lead

Exequt; Riyadh; On-site; SAR 90,000 - 140,000; Part time

Job summary

ExeQut is seeking a Senior Consultant in Cybersecurity Audit to join our IT audit team in Riyadh. You will lead assessments of application-level controls, automated controls, and data-integrity controls across SAP, Oracle, and Microsoft Dynamics.

You will draft findings, risk ratings, and practical recommendations while coordinating with client owners. Experience with COBIT, ISO 27001, and Saudi regulations is essential for this role.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or related discipline.
• 4-6 years of experience in application controls auditing, ERP security, or IT audit.
• Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics).
• Working knowledge of COBIT, ISO 27001 and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Strong documentation, analysis, and communication skills.

Responsibilities

• Plan and execute application controls reviews across ERP and business applications (SAP, Oracle, Microsoft Dynamics).
• Assess SoD, user access design, and sensitive access; evaluate remediation and mitigating controls.
• Test automated controls and IT-dependent manual controls; evaluate data interfaces and integrity.
• Support cybersecurity audits by linking application findings to broader risk.
• Evaluate controls against COBIT and ISO/IEC 27001 and Saudi requirements; document evidence.
• Draft findings, risk ratings, and recommendations; coordinate with owners.
• Contribute to methodology, testing tools, and knowledge sharing for application controls.

Skills

SoD controls

Access controls

COBIT

ISO 27001

Saudi regulations

Education

Bachelor's degree in CS/IS/Accounting Information Systems or related

Tools

SAP

Oracle

Microsoft Dynamics

Job description

ExeQut is seeking a Senior Consultant in Cybersecurity Audit to join our IT audit team in Riyadh. You will lead assessments of application-level controls, automated controls, and data-integrity controls across SAP, Oracle, and Microsoft Dynamics.

You will draft findings, risk ratings, and practical recommendations while coordinating with client owners. Experience with COBIT, ISO 27001, and Saudi regulations is essential for this role.