Lead Auditor

As Audit Lead – IT & Cyber Security Audit, you will lead the end-to-end execution
of IT, cybersecurity, and technology audit engagements, supervising
engagement teams and delivering high-quality audit results in line with Tabby's
technology risk-based audit plan.

● Lead the planning and execution of assigned IT general controls,

● application controls, and cybersecurity audit engagements, from
scoping through reporting.
● Develop detailed audit programs and risk and control matrices (RCMs)
covering IT and cyber risk areas, aligned with the approved audit plan.
● Supervise and review the fieldwork of Senior Auditors, Auditors, and
Interns assigned to the engagement, ensuring quality and adherence to
methodology.
● Conduct walkthroughs, technical interviews, and testing of IT general
controls, application controls, network and endpoint security, identity
and access management, and cloud configurations.
● Identify control gaps and root causes, and draft clear, actionable audit
findings and recommendations on technology and cyber risk.
● Draft audit reports and present engagement results to Engineering and
Information Security process owners.
● Engage directly with technology process owners to validate findings,
agree on corrective action plans, and set remediation timelines.
● Track and follow up on the implementation of IT and cyber audit
recommendations for assigned engagements.
● Contribute to the annual technology and cyber risk assessment for
assigned systems and platforms.
● Coach and provide on-the-job guidance to Senior Auditors, Auditors,
and Interns on IT audit techniques.
● Support the Audit Manager in preparing quarterly and annual IT/cyber
audit reporting materials.
● Stay current on IT auditing standards, cybersecurity frameworks, and
● SAMA regulatory requirements (including the SAMA Cyber Security

● 5+ years of experience in IT audit, information security, or technology risk,
including experience leading audit engagements, preferably within
banking, fintech, or corporate environments.
● Strong knowledge of IT auditing standards, cybersecurity frameworks,
and SAMA regulatory requirements.
● Experience assessing IT general controls, application controls, and
cybersecurity controls.
● Strong communication and interpersonal skills to engage with
technology process owners and present audit findings.
● Strong analytical and problem-solving skills with a detail-oriented
approach.
● Proficiency in IT audit tools and familiarity with cloud platforms
(AWS/Azure/GCP).
● Bachelor's degree in Computer Science, Information Systems,
Cybersecurity, or a related field; CISA (obtained or in progress) highly
desirable.