Chief Internal Audit Officer

Role Summary

Key Responsibilities

• Develop and maintain a risk-based internal audit strategy, annual audit plan, and multi-year audit universe.
• Establish and maintain the Internal Audit Charter, audit methodology, policies, procedures, and quality assurance processes.
• Conduct risk assessments across business units, products, processes, legal entities, and outsourced activities.
• Lead audits of financial, operational, credit, treasury, customer operations, technology, cybersecurity, compliance, and third-party risk management activities.
• Assess the design and operating effectiveness of internal controls, including segregation of duties, authorization controls, reconciliations, and management oversight.
• Assess controls supporting compliance with SAMA requirements, relevant regulations, and internal policies.
• Assess IT general controls, access management, change management, cloud environments, data protection, backup and recovery, and technology operations.
• Review cybersecurity governance and controls, including vulnerability management, incident response, security monitoring, privileged access, and third-party security.
• Communicate audit findings, agree action plans, and independently validate closure of significant findings.
• Provide periodic reports to the Board and Audit Committee on audit results, significant risks, and remediation progress.
• Evaluate controls designed to prevent and detect fraud, misconduct, conflicts of interest, and unauthorized transactions.
• Recruit, lead, coach, and develop the internal audit team and manage audit resources and budget.

Qualifications & Experience

• Bachelor's degree in Accounting, Finance, Business, Information Systems, or a related discipline; a relevant postgraduate qualification is an advantage.
• Typically 8-12+ years of experience in internal audit, risk, controls, or assurance, including significant leadership experience.
• Experience in a regulated financial institution, fintech, lending, or financial services environment is strongly preferred.
• Strong understanding of risk-based auditing, internal controls, governance, financial processes, and applicable SAMA requirements.
• Ability to assess IT and cybersecurity controls; experience leading technology audits is an advantage.
• Excellent analytical, report-writing, communication, leadership, and stakeholder management skills.
• Demonstrated integrity, objectivity, professional skepticism, and ability to handle confidential information.

Preferred Certifications

• Certified Internal Auditor (CIA).
• Certified Information Systems Auditor (CISA).
• Certified Public Accountant (CPA) or equivalent accounting qualification.
• Certified Fraud Examiner (CFE), where relevant.
• Relevant risk management or financial services certifications.

Reporting & Independence

Governance Note

• The job description should be tailored to Soar's approved governance documents, Internal Audit Charter, organizational structure, and applicable SAMA requirements.
• The experience ranges and certifications above are recommended hiring criteria, not a statement that each is mandatory under SAMA rules.