Senior IT Internal Auditor

Who we are:Albawani is one of the leading construction and contracting companies in Saudi Arabia. Established in 1991, the company has grown from a small civil works contractor into a major diversified group with operations across construction, infrastructure, engineering, water and power, and industrial services. Headquartered in Riyadh, Albawani is recognized for delivering large-scale commercial, healthcare, educational, and government projects throughout the Kingdom. Albawani is known for its strong commitment to quality, safety, and innovation, holding several international ISO certifications and a Class-1 contractor ranking in Saudi Arabia.

Job Title: Senior IT Internal AuditorRole Purpose: The Senior IT Internal Auditor is responsible for planning, executing, and leading IT audit engagements across the organization to evaluate the effectiveness of IT controls, risk management practices, and governance structures.

The role ensures compliance with internal policies, regulatory requirements, and industry standards, while identifying risks and recommending improvements to strengthen IT systems, processes, and data securityKey Activities:Lead IT audit engagements based on the approved audit planDevelop audit scope, programs, and testing proceduresAssess IT general controls (ITGCs), application controls, and system configurationsEvaluate user access management, data integrity, and security controlsIdentify and assess IT risks and their impact on business operationsEnsure compliance with internal policies and external standards (ISO 27001, COBIT, NIST)Evaluate IT governance frameworks and risk management processesAssess cybersecurity controls and data protection practicesPrepare clear and comprehensive audit reports with findings and recommendationsPresent audit results to management and key stakeholdersMonitor and follow up on remediation actions and closure of audit findingsPerform data analysis using audit tools (e.g., ACL, IDEA, Excel)Review system logs, integrations, and application controlsAssess ERP systems (Oracle, SAP) for control effectiveness and risksProvide advisory support on IT projects and system implementationsRecommend control enhancements and process improvementsStay updated on emerging technology risks and audit best practicesIndustry / Domain:Holding

Job Requirements

4–7 years of experience in IT auditing or IT riskStrong experience in IT general controls (ITGC), application controls, and securityExperience auditing ERP systems (Oracle, SAP, etc.)Knowledge of IT governance, cybersecurity, and infrastructure controlsExperience in risk-based audit methodologiesBachelor’s degree in Information Technology, Computer Science, or related fieldProfessional certifications, preferably holding CISA (Certified Information Systems Auditor) as highly preferred, in addition to CIA, CRISC, or CISSP.Job Specific Technical Skills:IT audit frameworks (COBIT, ISO 27001, NIST)ERP systems controls (Oracle, SAP)Data analysis tools (ACL, IDEA, Excel advanced)Understanding of cloud environments (Oracle Cloud, AWS, Azure)Knowledge of cybersecurity controls and risk assessmentStrong analytical, reporting, and documentation skills