IT & OT Audit Manager

ACWA Power is seeking an experienced IT & OT Audit Manager to lead and execute highly technical IT, OT, and cybersecurity audits across the group. This role will play a critical part in evaluating and strengthening governance, risk management, and control frameworks across industrial control systems, operational technology environments, and enterprise IT systems
.

You will work closely with senior stakeholders, audit committee members, and cross-functional teams to deliver complex audits in a rapidly evolving technology landscape, particularly within energy, utilities, and critical infrastructure environments
.

• Plan and execute IT and OT internal audits
  , cybersecurity reviews, and advisory engagements from initiation through reporting.
• Perform audits across ICS, SCADA, OT networks, and IT/OT converged environments
  .
• Develop detailed Audit Programs and Risk & Control Matrices (RCMs) aligned with group-wide risks.
• Identify high-risk areas, control gaps, root causes, and business impacts within IT/OT environments.
• Apply data analytics, IS audit techniques, and sampling methodologies during audit execution.
• Prepare high-quality audit reports
  , including professional conclusions and practical improvement recommendations.
• Track and validate management corrective actions through follow-up audits.
• Contribute to periodic reporting to Senior Management and Audit Committee
  .
• Provide insights on emerging technology risks, cybersecurity threats, and OT security trends
  .
• Support integrated audits and collaborate with business and group audit teams.

• Bachelor’s degree in Computer Science, Information Technology, Engineering
  , or related discipline.
• 7–10 years of experience in IT Internal Audit
  , with at least 3+ years in OT / IC environments
  .
• Hands‑on experience conducting cybersecurity assessments for IT/OT environments.
• Strong knowledge of ICS, SCADA, OT network architecture, and IT/OT convergence
  .
• In-depth understanding of OT/ICS standards such as IEC 62443, NIST 800-82
  .
• Knowledge of regulatory frameworks such as NCA (ECC, OTCC, CCC), NESA, ISR
  .
• Familiarity with OEM systems (e.g.,
  Honeywell, Yokogawa, Siemens
  ) is a strong advantage.
• Solid understanding of COBIT, ITIL, ISO 27001, NIST, ITAF
  .

• CISA (mandatory or highly preferred)
• OT / IC-related certifications (e.g.,
  GICSP, IEC 62443
  )
• CISSP, CISM
  , GIAC certifications
• Networking or Cloud certifications are a plus

• Work on large-scale, mission-critical energy and infrastructure projects
• Exposure to advanced OT environments and emerging technologies
• High visibility role with senior leadership and audit committee
• Strong career growth and learning opportunities