Senior IT Auditor: ERP, Security & Risk Leader

Albawani | البواني; Riyadh; On-site; SAR 180,000 - 290,000; Full time

Job summary

Albawani is seeking a Senior IT Internal Auditor to plan, execute, and lead IT audit engagements across the organization, assessing IT controls, risk management, and governance.

The role requires 4–7 years in IT auditing, strong ITGC and ERP (Oracle, SAP) experience, and knowledge of cybersecurity. CISA highly preferred; CIA/CRISC/CISSP also valued for advisory input on system implementations.

Qualifications

• 4–7 years in IT auditing or IT risk.
• Strong ITGC, application controls, and security knowledge.
• Experience auditing ERP systems (Oracle, SAP).
• Familiarity with IT governance, cybersecurity, and infrastructure controls.
• Risk-based audit methodologies experience.
• Bachelor’s degree in Information Technology / Computer Science or related field.
• CISA preferred; CIA/CRISC/CISSP also valued.

Responsibilities

• Lead IT audit engagements based on the approved plan.
• Develop audit scope, programs, and testing procedures.
• Assess IT general controls, application controls, and configurations.
• Evaluate user access management, data integrity, and security controls.
• Identify IT risks and their business impact.
• Ensure compliance with policies and standards (ISO 27001, COBIT, NIST).
• Present findings to management and stakeholders.
• Monitor remediation actions and closure of findings.
• Perform data analysis using audit tools like ACL, IDEA, and Excel.
• Review system logs, integrations, and ERP controls (Oracle, SAP).
• Provide advisory input on IT projects and system implementations.

Skills

IT auditing

IT risk assessment

ITGC

Cybersecurity

Data analysis

Education

Bachelor’s degree in IT / CS

Tools

ACL

IDEA

Excel

Oracle ERP

SAP ERP

Job description

Albawani is seeking a Senior IT Internal Auditor to plan, execute, and lead IT audit engagements across the organization, assessing IT controls, risk management, and governance.

The role requires 4–7 years in IT auditing, strong ITGC and ERP (Oracle, SAP) experience, and knowledge of cybersecurity. CISA highly preferred; CIA/CRISC/CISSP also valued for advisory input on system implementations.