Lead Auditor

Lead Auditor

Department: Internal Audit

Employment Type: Full Time

Location: KSA

Reporting To: Hatem Al Haidan

As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution
of IT, cybersecurity, and technology audit engagements, supervising
engagement teams and delivering high-quality audit results in line with Tabby's
technology risk-based audit plan.

• Lead the planning and execution of assigned IT general controls,
• application controls, and cybersecurity audit engagements, from
  scoping through reporting.
• Develop detailed audit programs and risk and control matrices (RCMs)
  covering IT and cyber risk areas, aligned with the approved audit plan.
• Supervise and review the fieldwork of Senior Auditors, Auditors, and
  Interns assigned to the engagement, ensuring quality and adherence to
  methodology.
• Conduct walkthroughs, technical interviews, and testing of IT general
  controls, application controls, network and endpoint security, identity
  and access management, and cloud configurations.
• Identify control gaps and root causes, and draft clear, actionable audit
  findings and recommendations on technology and cyber risk.
• Draft audit reports and present engagement results to Engineering and
  Information Security process owners.
• Engage directly with technology process owners to validate findings,
  agree on corrective action plans, and set remediation timelines.
• Track and follow up on the implementation of IT and cyber audit
  recommendations for assigned engagements.
• Contribute to the annual technology and cyber risk assessment for
  assigned systems and platforms.
• Coach and provide on-the-job guidance to Senior Auditors, Auditors,
  and Interns on IT audit techniques.
• Support the Audit Manager in preparing quarterly and annual IT/cyber
  audit reporting materials.
• Stay current on IT auditing standards, cybersecurity frameworks, and
  SAMA regulatory requirements (including the SAMA Cyber Security

• 5+ years of experience in IT audit, information security, or technology risk,
  including experience leading audit engagements, preferably within
  banking, fintech, or corporate environments.
• Strong knowledge of IT auditing standards, cybersecurity frameworks,
  and SAMA regulatory requirements.
• Experience assessing IT general controls, application controls, and
  cybersecurity controls.
• Strong communication and interpersonal skills to engage with
  technology process owners and present audit findings.
• Strong analytical and problem-solving skills with a detail-oriented
  approach.
• Proficiency in IT audit tools and familiarity with cloud platforms
  (AWS/Azure/GCP).
• Bachelor's degree in Computer Science, Information Systems,
  Cybersecurity, or a related field; CISA (obtained or in progress) highly
  desirable.