Senior Cybersecurity Audit Consultant

About the role

We are looking for a Senior Consultant in Cybersecurity Audit to join our IT audit team. In this role, you will lead the assessment of application‑level controls, automated business‑process controls, and interface and data‑integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working closely with the wider IT audit team.

Key responsibilities

• Plan and execute application controls reviews across ERP and business applications, including configurable controls, automated controls, and key reports.
• Assess segregation of duties, user access and authorization design, and sensitive access within enterprise applications, and evaluate related remediation and mitigating controls.
• Test automated business‑process controls and IT‑dependent manual controls, and evaluate interface, data‑conversion, and data‑integrity controls between systems.
• Support cybersecurity audits by linking application‑layer findings to broader technology and financial reporting risk.
• Evaluate application controls against COBIT, ISO/IEC 27001 and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL) and document evidence to a review‑ready standard.
• Draft findings, risk ratings, and practical recommendations, coordinating with client application, IT, and business‑process owners.
• Contribute to methodology, testing tools, and knowledge sharing for the application controls capability.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Accounting Information Systems or a related discipline.
• 4‑6 years of experience in application controls auditing, ERP security, or IT audit.
• Hands‑on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls.
• Working knowledge of application controls, automated controls, IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Strong documentation, analysis and communication skills with the ability to translate technical findings into practical business recommendations.
• Nice to have: professional certifications such as CISA (held or in progress), ERP‑specific credentials, CISM or CRISC.

Required skills

• SAP
• Oracle
• Microsoft Dynamics
• COBIT
• ISO 27001
• SAMA CSF
• NCA ECC
• PDPL
• Application controls
• Automated controls