IT Audit Manager

About HALA

Role Objective

Responsibilities

• Plan and execute risk-based audits across ITGC, cybersecurity, cloud computing, digital platforms, data governance, BCM, DR, third-party risk, and technology-enabled processes.
• Perform risk assessments, audit scoping, control identification, and development of audit programs and testing procedures.
• Evaluate control design and operating effectiveness and recommend improvements.
• Assess compliance with SAMA CSF, SAMA BCM, PCI DSS, ISO/IEC 27001, COBIT, NIST CSF, SWIFT CSCF where applicable, and other standards.
• Conduct stakeholder interviews and walkthroughs covering IT processes, systems, applications, infrastructure, and controls.
• Prepare audit reports, working papers, and executive presentations with evidence-based findings and recommendations.
• Present findings to senior management and facilitate corrective action plans.
• Validate management actions and remediation effectiveness through follow-up reviews.
• Maintain relationships with business, technology, risk, compliance, and external stakeholders while preserving independence.
• Monitor emerging technology risks, cybersecurity threats, regulatory requirements, and auditing and security standards.
• Provide advisory services for technology initiatives, digital transformation, system implementations, and ad hoc reviews.
• Enhance audit methodology through data analytics, continuous auditing, and technology-enabled tools.

What HALA Offers

• Inclusive and diverse culture with remote, in-office, and hybrid work setups.
• Competitive compensation packages with potential for shares.
• Regular training and an annual learning stipend.
• Exposure to a multinational team operating across seven countries.
• Autonomy, mentoring, challenging goals, and responsibility for meaningful work.

Requirements

• Plan and execute risk-based audits covering IT controls, cybersecurity, cloud computing, business continuity, disaster recovery, third-party risk, and technology-enabled processes.
• Evaluate the design and operating effectiveness of IT controls and identify technology risks and control deficiencies.
• Assess compliance with applicable regulatory requirements, internal policies, and technology risk and security standards.
• Conduct interviews and walkthroughs with business and technology stakeholders across systems, applications, infrastructure, and controls.
• Prepare evidence-based audit reports, working papers, and executive presentations with actionable recommendations.
• Present audit findings to senior management and facilitate agreement on corrective action plans.
• Maintain audit independence and objectivity while providing advisory and consulting services.