As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution of IT, cybersecurity, and technology audit engagements, supervising engagement teams and delivering high-quality audit results in line with Tabby's technology risk-based audit plan.
● Lead the planning and execution of assigned IT general controls,
● application controls, and cybersecurity audit engagements, from scoping through reporting.
● Develop detailed audit programs and risk and control matrices (RCMs) covering IT and cyber risk areas, aligned with the approved audit plan.
● Supervise and review the fieldwork of Senior Auditors, Auditors, and
Interns assigned to the engagement, ensuring quality and adherence to methodology.
● Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations.
● Identify control gaps and root causes, and draft clear, actionable audit findings and recommendations on technology and cyber risk.
● Draft audit reports and present engagement results to Engineering and
Information Security process owners.
● Engage directly with technology process owners to validate findings, agree on corrective action plans, and set remediation timelines.
● Track and follow up on the implementation of IT and cyber audit recommendations for assigned engagements.
● Contribute to the annual technology and cyber risk assessment for assigned systems and platforms.
● Coach and provide on-the-job guidance to Senior Auditors, Auditors, and Interns on IT audit techniques.
● Support the Audit Manager in preparing quarterly and annual IT/cyber audit reporting materials.
● Stay current on IT auditing standards, cybersecurity frameworks, and
● SAMA regulatory requirements (including the SAMA Cyber Security
● 5+ years of experience in IT audit, information security, or technology risk, including experience leading audit engagements, preferably within banking, fintech, or corporate environments.
● Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements.
● Experience assessing IT general controls, application controls, and cybersecurity controls.
● Strong communication and interpersonal skills to engage with technology process owners and present audit findings.
● Strong analytical and problem-solving skills with a detail-oriented approach.
● Proficiency in IT audit tools and familiarity with cloud platforms
(AWS/Azure/GCP).
● Bachelor's degree in Computer Science, Information Systems,
Cybersecurity, or a related field; CISA (obtained or in progress) highly desirable.
