Lead Auditor – IT & Cyber Security

About the role

As the Lead Auditor for IT & Cyber Security, you will head end‑to‑end audit engagements, ensuring technology risk is identified, assessed, and mitigated in line with Tabby’s risk‑based audit plan. You will supervise audit teams, interact with technology owners, and deliver high‑quality audit reports.

Key responsibilities

• Plan and execute IT general controls, application controls, and cybersecurity audit engagements from scoping to reporting.
• Develop detailed audit programs and risk‑control matrices aligned with the approved audit plan.
• Supervise and review fieldwork of Senior Auditors, Auditors, and Interns, ensuring methodology compliance.
• Conduct walkthroughs, technical interviews, and testing of network, endpoint security, IAM, and cloud configurations.
• Identify control gaps, draft actionable findings, and present results to engineering and information‑security owners.
• Validate findings with process owners, agree on corrective action plans, and track remediation timelines.
• Contribute to annual technology and cyber risk assessments for assigned systems.
• Coach junior audit staff on IT audit techniques and support quarterly/annual reporting.

Required profile

• 5+ years of experience in IT audit, information security, or technology risk, preferably in banking, fintech, or corporate environments.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field.
• CISA certification (obtained or in progress) is highly desirable.

Required skills

• Strong knowledge of IT auditing standards and cybersecurity frameworks.
• Experience with SAMA regulatory and cyber‑security requirements.
• Proficiency in assessing IT general controls, application controls, network and endpoint security, IAM, and cloud configurations.
• Familiarity with cloud platforms (AWS, Azure, GCP) and IT audit tools.