Senior Information Technology Auditor

Aljazira Bank | بنك الجزيرة; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Aljazira Bank in Riyadh seeks an experienced IT Audit professional to support technology and cyber security audits. You will evaluate IT governance, information security controls, cyber resilience, cloud environments, and technology operations to provide independent assurance that risk is managed and regulatory requirements are met.

The role requires 7–10 years of IT Audit/ Cyber Security Audit experience, preferably in banking or regulated environments, with relevant certifications.

Qualifications

• Bachelor's degree in CS/IT/Cyber Security or a related field.
• 7–10 years of IT Audit / Cyber Security Audit experience.
• Experience in banking or regulated environments preferred.
• Relevant professional certifications preferred.

Responsibilities

• Plan and execute technology and cyber security audits in accordance with the approved annual audit plan.
• Assess design and operating effectiveness of IT general controls (ITGCs) and application controls.
• Review cyber security governance, IAM, network security, endpoint security, cloud security, vulnerability management, incident response, and monitoring.
• Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/BCP controls.
• Assess compliance with regulatory requirements, internal policies, and standards (SAMA, NCA ECC, ISO 27001, NIST).
• Perform risk assessments, identify control gaps, and recommend improvements.
• Prepare audit working papers, reports, and presentations for management.
• Follow up on audit findings and validate action plan implementations.
• Support investigations, special reviews, and advisory engagements in tech and cyber security.
• Stay current with emerging cyber threats and risk practices.

Skills

Audit planning

Risk assessment

Regulatory compliance

Communication

Reporting

Analytical thinking

Team collaboration

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

Audit software

Job description

Support the execution of technology and cyber security audits by evaluating the effectiveness of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The role provides independent assurance that technology risks are appropriately managed and regulatory requirements are met.

Key Responsibilities

• Plan and execute technology and cyber security audits in accordance with the approved annual audit plan.
• Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
• Review cyber security governance, identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
• Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/business continuity controls.
• Assess compliance with regulatory requirements, internal policies, and industry standards (e.g., SAMA Cyber Security Framework, NCA ECC, ISO 27001, NIST).
• Perform risk assessments, identify control gaps, and recommend practical improvements.
• Prepare clear audit working papers, reports, and presentations for management.
• Follow up on audit findings and validate the implementation of agreed action plans.
• Support investigations, special reviews, and advisory engagements related to technology and cyber security.
• Stay current with emerging cyber threats, technology risks, and leading audit practices.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Systems, or a related field.
• Relevant professional certifications are preferred.
• 7–10 years of experience in IT Audit, Cyber Security Audit, Information Security, or Technology Risk.
• Experience within banking, financial services, or a regulated environment is highly preferred.