Senior IT Audit Lead — Cybersecurity & Risk Management

Hala; Riyadh; Hybrid; SAR 180,000 - 300,000; Full time

Benefits offered by this job

Inclusive, remote/in-office/hybrid

Competitive compensation including, if

Training and annual learning stipend

Diverse, multinational team across 7+?

Autonomy, mentoring, and challenging

Strong emphasis on responsibility and作

Job summary

HALA is seeking an IT Audit Manager to lead risk-based audits across ITGC, cybersecurity, BCM, and technology-enabled processes in a dynamic fintech environment in Saudi Arabia. You will plan, execute, and report on audits, assess controls, and provide practical recommendations to strengthen governance and cyber resilience.

The role emphasizes independent assurance, stakeholder collaboration, and staying ahead of regulatory requirements such as SAMA CSF, PCI DSS, ISO 27001, and COBIT.

Responsibilities

• Plan and execute risk-based IT audit engagements (ITGC, cybersecurity, BCM).
• Evaluate design and operating effectiveness of IT controls and identify deficiencies.
• Assess compliance with regulatory requirements and industry standards (SAMA CSF, PCI DSS, ISO 27001, COBIT, NIST).
• Prepare clear audit reports, working papers, and executive presentations.
• Present findings to senior management and agree on corrective action plans.
• Monitor remediation actions through follow-up reviews and independent assurance.
• Build relationships with business units, risk, and external stakeholders while preserving independence.
• Stay abreast of emerging tech risks and regulatory changes; provide advisory on tech initiatives.

Job description

HALA is seeking an IT Audit Manager to lead risk-based audits across ITGC, cybersecurity, BCM, and technology-enabled processes in a dynamic fintech environment in Saudi Arabia. You will plan, execute, and report on audits, assess controls, and provide practical recommendations to strengthen governance and cyber resilience.

The role emphasizes independent assurance, stakeholder collaboration, and staying ahead of regulatory requirements such as SAMA CSF, PCI DSS, ISO 27001, and COBIT.