Cybersecurity Audit Consultant

Job Description
We are looking for a Senior Consultant in Cybersecurity Audit to join our IT audit team. In this role, you will lead the assessment of application-level controls, automated business-process controls, and interface and data-integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working closely with the wider IT audit team.

Key Responsibilities

• Plan and execute application controls reviews across ERP and business applications (e.g., SAP, Oracle, Microsoft Dynamics), including configurable controls, automated controls, and key reports.
• Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, and evaluate related remediation and mitigating controls.
• Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems.
• Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risk.
• Evaluate application controls against COBIT and ISO/IEC 27001 and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), and document evidence to a review-ready standard.
• Draft findings, risk ratings, and practical recommendations, and coordinate with client application, IT, and business-process owners.
• Contribute to methodology, testing tools, and knowledge sharing for the application controls capability.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline.
• Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls.
• Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).
• Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations.

Nice to have

• Professional certification such as CISA (held or in progress).

• ERP-specific credentials, CISM, or CRISC are an advantage.

• Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline.

• 4-6 years of experience in application controls auditing, ERP security, or IT audit.

• Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls.

• Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL).

• Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations.

• Professional certification such as CISA (held or in progress).

• ERP-specific credentials, CISM, or CRISC are an advantage.