Cyber Security Auditor

Job Objective

Our firm is seeking a Cybersecurity Auditor to join on an immediate, part-time basis.

Job Objective

The objective of this role is to independently conduct a comprehensive audit of the client’s compliance with the Central Bank of Kuwait’s Cyber and Operational Resilience Framework (CORF). The role will involve identifying compliance gaps, reviewing supporting evidence, documenting audit findings, and providing practical recommendations to strengthen the client’s control environment and support ongoing compliance with CORF requirements.

• Review the client’s Statement of Applicability and Inherent Risk Profile against applicable CORF requirements.
• Review the client’s governance and control framework across the Cyber Resilience, Operational Resilience, and Third-Party Risk Management baselines.
• Perform testing and validation of the client’s implemented cybersecurity and operational resilience controls.
• Assess identified risks and evaluate the client’s maturity against applicable CORF requirements.
• Document audit procedures, evidence, testing results, and conclusions through complete working papers.
• Support the preparation of the independent audit assessment report and related engagement deliverables.
• Coordinate with relevant client stakeholders to obtain documentation, evidence, clarifications, and walkthroughs.
• Perform the assigned engagement activities onsite at the client’s premises.
• Maintain the confidentiality of all client data, information, documents, and audit working papers.

Bachelor’s or master’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Audit, or a related field.

Professional certifications preferred (e.g., CISA, CISSP, CISM, CRISC, ISO/IEC 27001 Lead Auditor, ISO 22301 Lead Auditor, CIA, COBIT, or ITIL certifications).

• Minimum 5–10 years of experience in cybersecurity audit, information technology audit, technology risk, operational resilience, or regulatory compliance.
• Demonstrated experience conducting cybersecurity and operational resilience audits within banks or regulated financial institutions.
• Strong experience reviewing cybersecurity controls against regulatory frameworks and baseline requirements.
• Prior involvement in Central Bank of Kuwait regulatory audits or compliance assessments.
• Experience working within banks or financial institutions.
• Experience interacting with senior management, Boards, Audit Committees, and regulators.
• Familiarity with cybersecurity, operational resilience, business continuity, technology resilience, and third-party risk management frameworks.

• Direct Report To:
  Director (Project Director of the CORF Audit).
• Indirect Coordination with Internal Bank Teams.

• Ability to prepare complete and well-supported audit working papers.
• Strong professional judgment, attention to detail, and professional skepticism.
• Ability to communicate technical findings clearly to technical and non-technical stakeholders.
• Strong stakeholder management and communication skills.