Information Technology Auditor

About ECOVIS Al Sabti

ECOVIS Al Sabti, a distinguished member firm of the ECOVIS International network, operates in the Kingdom of Saudi Arabia with a commitment to delivering exceptional consulting services. As part of a global network spanning over 95 countries, ECOVIS unites approximately 11,000 professionals who provide tailored solutions across a broad spectrum of industries. The firm specializes in Audit and Assurance, Financial Advisory, Enterprise Risk Management, Cybersecurity, Business Continuity, Data Management, Technology, Tax Consulting, and Accounting. By leveraging a unique blend of international expertise and localized market insights, ECOVIS ensures high-quality, customized services that address the evolving needs of its diverse clientele. The firm is renowned for its innovative approach, unwavering dedication to excellence, and the ability to offer personalized advice backed by a robust global network.

Position Overview

We are seeking a highly skilled and motivated Information Technology Auditor to join our dynamic team in Saudi Arabia. In this pivotal role, you will be responsible for evaluating and enhancing the effectiveness of IT controls, cybersecurity frameworks, and technology risk management processes for our clients across various industries. Your expertise will play a critical role in identifying control weaknesses, assessing compliance gaps, and providing actionable recommendations to mitigate risks and strengthen governance structures. This position offers an exciting opportunity to work on diverse engagements, collaborate with cross-functional teams, and contribute to the delivery of high-impact solutions that align with global best practices and local regulatory requirements.

Key Responsibilities

• IT Audit Execution: Conduct comprehensive IT audits, including assessments of IT General Controls (ITGCs), application controls, system development lifecycle, change management, and IT operations. Evaluate the design and operating effectiveness of controls to ensure alignment with organizational objectives and regulatory standards.
• Risk and Compliance Assessment: Perform detailed evaluations of technology risks, cybersecurity threats, and compliance gaps in accordance with established frameworks such as COBIT, ISO 27001, NIST Cybersecurity Framework, and NCA Cybersecurity Controls. Identify areas of non-compliance and recommend remediation strategies to enhance security posture and operational resilience.
• Control Testing and Reporting: Execute control testing procedures, document audit findings, and prepare clear, concise, and actionable audit reports. Collaborate with stakeholders to ensure timely remediation of identified issues and track the closure of audit observations to verify effective resolution.
• Stakeholder Engagement: Liaise with IT, cybersecurity, compliance, and business teams to gather relevant information, facilitate audit processes, and communicate technical findings in a manner accessible to both technical and non-technical audiences. Foster strong working relationships to drive collaborative problem-solving and continuous improvement.
• Regulatory and Industry Standards: Stay abreast of emerging trends, regulatory changes, and industry best practices in IT governance, cybersecurity, and risk management. Apply this knowledge to enhance audit methodologies and ensure the firm’s services remain at the forefront of the industry.
• Professional Development: Pursue and maintain relevant professional certifications, such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or equivalent credentials, to demonstrate expertise and commitment to the field of IT audit and cybersecurity.

Qualifications and Experience

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a closely related field.
• Minimum of 3 to 5 years of progressive professional experience in IT Audit, Information Systems Audit, Technology Risk, Cybersecurity Audit, IT Governance, Risk & Compliance (GRC), or a related consulting discipline.
• In-depth understanding of IT audit methodologies, ITGCs, application controls, technology risk management, information security controls, and cybersecurity governance frameworks.
• Familiarity with industry-recognized standards and regulatory requirements, including COBIT, ISO 27001, NIST Cybersecurity Framework, NCA Cybersecurity Controls, and other applicable local and international IT governance and cybersecurity guidelines.
• Proven experience in assessing key IT controls, such as user access management, change management, IT operations, backup and disaster recovery, system development, information security, and third-party/vendor controls.
• Strong analytical skills with the ability to identify control weaknesses, assess risks, and develop practical, risk-based recommendations for remediation.
• Excellent written and verbal communication skills, enabling the effective articulation of technical concepts and audit findings to diverse stakeholders.
• Professional certifications such as CISA, CISM, or equivalent IT Audit/Information Security credentials are highly desirable.
• Demonstrated ability to manage audit engagements, meet deadlines, and deliver high-quality results within established timelines and quality standards.

Why Join ECOVIS Al Sabti?

As an Information Technology Auditor at ECOVIS Al Sabti, you will have the opportunity to work on challenging and rewarding projects that make a tangible difference for our clients. You will benefit from a collaborative work environment, access to cutting-edge tools and resources, and the chance to grow both professionally and personally within a global network. We offer competitive compensation packages, ongoing training and development opportunities, and a supportive culture that values innovation, integrity, and excellence. If you are passionate about IT audit, cybersecurity, and risk management, and eager to contribute to the success of a leading international consulting firm, we invite you to apply and become part of our dynamic team.