Senior IT & Cybersecurity Audit Lead

tabby; Medina; On-site; SAR 180,000 - 320,000; Full time

Job summary

Tabby is seeking an Audit Lead IT & Cyber Security Audit to drive end-to-end IT and cybersecurity audits, supervising engagement teams and delivering high-quality results aligned with the risk-based audit plan. You will plan and execute IT general controls and application controls, develop risk and control matrices, and present findings to technology process owners.

Ideal candidates have 5+ years in IT audit or information security, knowledge of standards and SAMA regulations, and experience

Qualifications

• 5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and cybersecurity controls.
• Strong communication and interpersonal skills to engage with technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• CISA (obtained or in progress) highly desirable.

Responsibilities

• Lead the planning and execution of IT general controls, application controls, and cybersecurity audit engagements from scoping through reporting.
• Develop detailed audit programs and risk and control matrices covering IT and cyber risk areas aligned with the approved audit plan.
• Supervise and review fieldwork of Senior Auditors, Auditors, and Interns to ensure quality and adherence to methodology.
• Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, IAM, and cloud configurations.
• Identify control gaps and root causes and draft actionable audit findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and Information Security process owners.
• Engage with technology process owners to validate findings and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit recommendations.

Skills

IT Audit

InfoSec

Cybersecurity

Audit Leadership

SAMA Regulations

Education

BSc CS/IS/Cybersecurity

Tools

Audit Tools

Job description

Tabby is seeking an Audit Lead IT & Cyber Security Audit to drive end-to-end IT and cybersecurity audits, supervising engagement teams and delivering high-quality results aligned with the risk-based audit plan. You will plan and execute IT general controls and application controls, develop risk and control matrices, and present findings to technology process owners.

Ideal candidates have 5+ years in IT audit or information security, knowledge of standards and SAMA regulations, and experience