Strategic IT & Cyber Audit Lead

Emdad By Elm; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

Emdad By Elm invites an IT & Cyber Audit professional to support the Internal Audit function by assessing IT governance, information security, cyber resilience, and technology-enabled processes across the organization.

You will plan and execute IT and cyber audits, review ITGCs and cybersecurity controls, prepare reports with observations and recommendations, track remediation plans, and advise on control design for new systems and digital initiatives.

Qualifications

• Bachelor's degree in IT, CS, IS, cybersecurity, or related field.
• Relevant IT audit, cybersecurity, risk management, or technology assurance experience.
• Experience in government, regulated environments, or large complex organizations preferred.
• CISA, CISM, CRISC certifications.

Responsibilities

• Plan and execute IT and cybersecurity audits per plan and methodology.
• Assess ITGCs, application controls, and cybersecurity controls across systems, platforms, and infrastructure.
• Evaluate compliance with frameworks (e.g., NCA, ISO 27001, COBIT).
• Prepare audit reports with observations, root causes, risks, and practical recommendations.
• Track management action plans and verify timely closure of audit issues.
• Engage with IT, cybersecurity, and business stakeholders to understand systems, processes, and risk exposures.
• Provide advisory input on control design for new systems and digital initiatives.

Skills

ITGCs

Cybersecurity controls

Cloud platforms

IAM

Data protection

GRC tools

Audit analytics

Stakeholder management

Analytical thinking

Education

Bachelor's degree in IT / CS / IS / Cybersecurity

Tools

GRC tools

Audit analytics

Job description

Emdad By Elm invites an IT & Cyber Audit professional to support the Internal Audit function by assessing IT governance, information security, cyber resilience, and technology-enabled processes across the organization.

You will plan and execute IT and cyber audits, review ITGCs and cybersecurity controls, prepare reports with observations and recommendations, track remediation plans, and advise on control design for new systems and digital initiatives.