Lead Auditor

As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution of IT, cybersecurity, and technology audit engagements, supervising engagement teams and delivering high-quality audit results in line with Tabby's technology risk-based audit plan. ● Lead the planning and execution of assigned IT general controls, ● application controls, and cybersecurity audit engagements, from scoping through reporting. ● Develop detailed audit programs and risk and control matrices (RCMs) covering IT and cyber risk areas, aligned with the approved audit plan. ● Supervise and review the fieldwork of Senior Auditors, Auditors, and Interns assigned to the engagement, ensuring quality and adherence to methodology. ● Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations. ● Identify control gaps and root causes, and draft clear, actionable audit findings and recommendations on technology and cyber risk. ● Draft audit reports and present engagement results to Engineering and Information Security process owners. ● Engage directly with technology process owners to validate findings, agree on corrective action plans, and set remediation timelines. ● Track and follow up on the implementation of IT and cyber audit recommendations for assigned engagements. ● Contribute to the annual technology and cyber risk assessment for assigned systems and platforms. ● Coach and provide on-the-job guidance to Senior Auditors, Auditors, and Interns on IT audit techniques. ● Support the Audit Manager in preparing quarterly and annual IT/cyber audit reporting materials. ● Stay current on IT auditing standards, cybersecurity frameworks, and ● SAMA regulatory requirements (including the SAMA Cyber Security ● 5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments. ● Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements. ● Experience assessing IT general controls, application controls, and cybersecurity controls. ● Strong communication and interpersonal skills to engage with technology process owners and present audit findings. ● Strong analytical and problem-solving skills with a detail-oriented approach. ● Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP). ● Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; CISA (obtained or in progress) highly desirable.

5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments. Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements. Experience assessing IT general controls, application controls, and cybersecurity controls. Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP). Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; CISA (obtained or in progress) highly desirable.

Lead the planning and execution of IT general controls, application controls, and cybersecurity audit engagements, from scoping through reporting. Develop detailed audit programs and risk and control matrices (RCMs) covering IT and cyber risk areas, aligned with the approved audit plan. Supervise and review the fieldwork of Senior Auditors, Auditors, and Interns assigned to the engagement, ensuring quality and adherence to methodology. Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations. Identify control gaps and root causes, and draft clear, actionable audit findings and recommendations on technology and cyber risk. Draft audit reports and present engagement results to Engineering and Information Security process owners. Engage directly with technology process owners to validate findings, agree on corrective action plans, and set remediation timelines. Track and follow up on the implementation of IT and cyber audit recommendations for assigned engagements. Contribute to the annual technology and cyber risk assessment for assigned systems and platforms. Coach and provide on-the-job guidance to Senior Auditors, Auditors, and Interns on IT audit techniques. Support the Audit Manager in preparing quarterly and annual IT/cyber audit reporting materials. Stay current on IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements.