Summary
Bank AlJazira is hiring a Senior IT Auditor in Riyadh to provide independent assurance on technology risks and regulatory compliance. The role plans and conducts technology and cyber security audits, assesses controls across infrastructure, applications and cloud environments, and recommends practical improvements. It also prepares audit reports, follows up on findings, and supports special reviews and investigations. Applicants need a relevant bachelor's degree and 7–10 years of experience; banking or regulated-environment experience is preferred, as are relevant professional certifications.
The posting
As published on baj.com.sa. Pulled from the employer's site and shown as they wrote it.
Support the execution of technology and cyber security audits by evaluating the effectiveness of IT governance, information security controls, cyber resilience, infrastructure, applications, cloud environments, and technology operations. The role provides independent assurance that technology risks are appropriately managed and regulatory requirements are met.
Key Responsibilities
- Plan and execute technology and cyber security audits in accordance with the approved annual audit plan.
- Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
- Review cyber security governance, identity and access management, network security, endpoint security, cloud security, vulnerability management, incident response, and security monitoring.
- Evaluate IT infrastructure, databases, operating systems, cloud platforms, and disaster recovery/business continuity controls.
- Assess compliance with regulatory requirements, internal policies, and industry standards (e.g., SAMA Cyber Security Framework, NCA ECC, ISO 27001, NIST).
- Perform risk assessments, identify control gaps, and recommend practical improvements.
- Prepare clear audit working papers, reports, and presentations for management.
- Follow up on audit findings and validate the implementation of agreed action plans.
- Support investigations, special reviews, and advisory engagements related to technology and cyber security.
- Stay current with emerging cyber threats, technology risks, and leading audit practices.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Systems, or a related field.
- Relevant professional certifications are preferred
- 7–10 years of experience in IT Audit, Cyber Security Audit, Information Security, or Technology Risk.
- Experience within banking, financial services, or a regulated environment is highly preferred.
- Experience auditing infrastructure, cloud platforms, applications, databases, and cyber security controls.