ملخص الوظيفة
يعلن بنك الجزيرة عن وظيفة مدقق تقنية معلومات أول في الرياض لتقديم تأكيد مستقل بشأن مخاطر التقنية والالتزام بالمتطلبات التنظيمية. تشمل المهام تخطيط وتنفيذ تدقيقات التقنية والأمن السيبراني، وتقييم الضوابط في البنية التحتية والتطبيقات والبيئات السحابية، واقتراح التحسينات. كما تتضمن إعداد تقارير التدقيق ومتابعة الملاحظات ودعم المراجعات والتحقيقات الخاصة. يشترط الحصول على بكالوريوس في تخصص ذي صلة وخبرة من 7 إلى 10 سنوات، وتُفضّل الخبرة في القطاع المصرفي أو بيئة خاضعة للتنظيم والشهادات المهنية ذات الصلة.
نص الإعلان
كما نُشر على baj.com.sa. نقلناه من موقع صاحب العمل كما كتبه.
Support the execution of technology and cyber security audits by evaluating the effectiveness of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The role provides independent assurance that technology risks are appropriately managed and regulatory requirements are met.
Key Responsibilities
- Plan and execute technology and cyber security audits in accordance with the approved annual audit plan.
- Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
- Review cyber security governance, identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
- Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/business continuity controls.
- Assess compliance with regulatory requirements, internal policies, and industry standards (e.g., SAMA Cyber Security Framework, NCA ECC, ISO 27001, NIST).
- Perform risk assessments, identify control gaps, and recommend practical improvements.
- Prepare clear audit working papers, reports, and presentations for management.
- Follow up on audit findings and validate the implementation of agreed action plans.
- Support investigations, special reviews, and advisory engagements related to technology and cyber security.
- Stay current with emerging cyber threats, technology risks, and leading audit practices.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Systems, or a related field.
- Relevant professional certifications are preferred
- 7–10 years of experience in IT Audit, Cyber Security Audit, Information Security, or Technology Risk.
- Experience within banking, financial services, or a regulated environment is highly preferred.
- Experience auditing infrastructure, cloud platforms, applications, databases, and cyber security controls.