Senior IT Internal Auditor

Who we are: Albawani is one of the leading construction and contracting companies in Saudi Arabia. Established in 1991, the company has grown from a small civil works contractor into a major diversified group with operations across construction, infrastructure, engineering, water and power, and industrial services. Headquartered in Riyadh, Albawani is recognized for delivering large-scale commercial, healthcare, educational, and government projects throughout the Kingdom. Albawani is known for its strong commitment to quality, safety, and innovation, holding several international ISO certifications and a Class-1 contractor ranking in Saudi Arabia. Job Title: Senior IT Internal Auditor Role Purpose: The Senior IT Internal Auditor is responsible for planning, executing, and leading IT audit engagements across the organization to evaluate the effectiveness of IT controls, risk management practices, and governance structures. The role ensures compliance with internal policies, regulatory requirements, and industry standards, while identifying risks and recommending improvements to strengthen IT systems, processes, and data security Key Activities: • Lead IT audit engagements based on the approved audit plan • Develop audit scope, programs, and testing procedures • Assess IT general controls (ITGCs), application controls, and system configurations • Evaluate user access management, data integrity, and security controls • Identify and assess IT risks and their impact on business operations • Ensure compliance with internal policies and external standards (ISO 27001, COBIT, NIST) • Evaluate IT governance frameworks and risk management processes • Assess cybersecurity controls and data protection practices • Prepare clear and comprehensive audit reports with findings and recommendations • Present audit results to management and key stakeholders • Monitor and follow up on remediation actions and closure of audit findings • Perform data analysis using audit tools (e.g., ACL, IDEA, Excel) • Review system logs, integrations, and application controls • Assess ERP systems (Oracle, SAP) for control effectiveness and risks • Provide advisory support on IT projects and system implementations • Recommend control enhancements and process improvements • Stay updated on emerging technology risks and audit best practices Industry / Domain: Holding Job Requirements: • 4–7 years of experience in IT auditing or IT risk • Strong experience in IT general controls (ITGC), application controls, and security • Experience auditing ERP systems (Oracle, SAP, etc.) • Knowledge of IT governance, cybersecurity, and infrastructure controls • Experience in risk-based audit methodologies • Bachelor’s degree in Information Technology, Computer Science, or related field • Professional certifications, preferably holding CISA (Certified Information Systems Auditor) as highly preferred, in addition to CIA, CRISC, or CISSP. Job Specific Technical Skills: • IT audit frameworks (COBIT, ISO 27001, NIST) • ERP systems controls (Oracle, SAP) • Data analysis tools (ACL, IDEA, Excel advanced) • Understanding of cloud environments (Oracle Cloud, AWS, Azure) • Knowledge of cybersecurity controls and risk assessment • Strong analytical, reporting, and documentation skills