IT Audit
Role Overview
Supports Internal Audit by providing independent assurance over IT systems, cybersecurity controls, and digital initiatives.
Assesses technology governance, information security, cyber resilience, and technology-enabled processes for alignment with regulations, organizational policies, and strategic objectives.
Contributes to stronger controls, technology risk management, and trust in digital services and platforms.
Key Skills for This Role
Full Job Posting
Role purpose
Supports Internal Audit by providing independent assurance over IT systems, cybersecurity controls, and digital initiatives.
Assesses technology governance, information security, cyber resilience, and technology-enabled processes for alignment with regulations, organizational policies, and strategic objectives.
Contributes to stronger controls, technology risk management, and trust in digital services and platforms.
IT and cyber audit execution
- Plan and execute IT and cybersecurity audits under the approved audit plan and internal audit methodology.
- Assess IT general controls, application controls, and cybersecurity controls across systems, platforms, and infrastructure.
- Evaluate compliance with relevant frameworks and standards, such as NCA, ISO 27001, and COBIT.
Reporting and follow-up
- Prepare concise audit reports covering observations, root causes, risks, and practical recommendations.
- Track management action plans and validate timely and effective closure of audit issues.
Stakeholder management
- Engage IT, cybersecurity, and business stakeholders to understand systems, processes, and risk exposures.
- Provide advisory input on control design for new systems, digital initiatives, and major IT projects when required.
Continuous improvement
- Stay current on emerging technology and cyber risks, regulatory changes, and leading audit practices.
- Contribute to improving IT audit tools, techniques, and methodologies.
Requirements
- Ability to plan and execute IT and cybersecurity audits in accordance with an approved audit plan and internal audit methodology.
- Knowledge of IT governance, information security, cyber resilience, and technology-enabled processes.
- Ability to assess IT general controls, application controls, and cybersecurity controls.
- Familiarity with relevant frameworks and standards such as NCA, ISO 27001, or COBIT.
- Ability to prepare clear audit reports with risks, root causes, and practical recommendations.
- Ability to engage IT, cybersecurity, and business stakeholders and provide advisory input on control design.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Emdad By Elm
(أخصائي عمليات موارد بشرية (برنامج تمهير)
, KSA
Emdad By Elm is seeking recent HR graduates to join its team through the Tamheer program. The role supports daily HR operations, recruitment follow-up, periodic reporting, and employee activities while building practical
Call Center Specialist
, KSA
Emdad By Elm seeks a Customer Service Representative to handle customer inquiries by phone and provide professional support until case closure in Makkah and Jeddah. No prior experience is required; the key requirement is
Board and Committees Affairs Specialist
, KSA
Emdad By Elm seeks a Board and Committees Affairs Specialist to coordinate governance and administrative activities for boards and committees. The role covers meeting organization, agendas and minutes, follow-up on resol
مدير تنفيذي
, KSA
تبحث الجهة عن مدير تنفيذي لقيادة العمليات والمشاريع والأداء التجاري والمالي وتحقيق النمو والجودة والربحية. يتطلب الدور خبرة إجمالية من 12 إلى 15 سنة، منها خمس سنوات قيادية على الأقل، وخبرة مباشرة في الميزانيات والأرباح و
Softskill Trainers
Riyadh, KSA
The employer seeks a Soft Skills Trainer to design, deliver, and improve employee development programs using adult and experiential learning methods. The role requires at least five years of training and facilitation exp
IBM DataPower Developer
Riyadh, KSA
The employer is seeking an experienced IBM DataPower Developer to build and maintain secure enterprise integration solutions. The work includes gateway configuration, security, transformation, API integration, performanc
Senior Elasticsearch Observability engineer
Jeddah, KSA
The employer is seeking a senior engineer to administer production Elasticsearch clusters and observability environments. The role covers scalability, security, monitoring, Elastic ML, enterprise integrations, and automa
Senior Consultant Delivery & Support
Riyadh, KSA
Emdad By Elm is seeking a Senior Consultant to lead end-to-end application delivery and support, maintain stable operations, and improve service quality. The role manages incidents, changes, SLAs, cross-module coordinati
(أخصائي عمليات موارد بشرية (برنامج تمهير)
, KSA
Call Center Specialist
, KSA
Board and Committees Affairs Specialist
, KSA
مدير تنفيذي
, KSA
Softskill Trainers
Riyadh, KSA
IBM DataPower Developer
Riyadh, KSA
Senior Elasticsearch Observability engineer
Jeddah, KSA
Senior Consultant Delivery & Support
Riyadh, KSA