Cybersecurity Audit Consultant

Job Description We are looking for a Senior Consultant in Cybersecurity Audit to join our IT audit team. In this role, you will lead the assessment of application-level controls, automated business-process controls, and interface and data-integrity controls across enterprise applications such as SAP, Oracle, and Microsoft Dynamics, working closely with the wider IT audit team. Key Responsibilities • Plan and execute application controls reviews across ERP and business applications (e.g., SAP, Oracle, Microsoft Dynamics), including configurable controls, automated controls, and key reports. • Assess segregation of duties (SoD), user access and authorization design, and sensitive access within enterprise applications, and evaluate related remediation and mitigating controls. • Test automated business-process controls and IT-dependent manual controls, and evaluate interface, data-conversion, and data-integrity controls between systems. • Support cybersecurity audits by linking application-layer findings to broader technology and financial reporting risk. • Evaluate application controls against COBIT and ISO/IEC 27001 and relevant Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL), and document evidence to a review-ready standard. • Draft findings, risk ratings, and practical recommendations, and coordinate with client application, IT, and business-process owners. • Contribute to methodology, testing tools, and knowledge sharing for the application controls capability. Requirements • Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline. • Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls. • Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL). • Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations. Nice to have • Professional certification such as CISA (held or in progress). • ERP-specific credentials, CISM, or CRISC are an advantage. • Bachelor's degree in Computer Science, Information Systems, Accounting Information Systems, or a related discipline. • 4-6 years of experience in application controls auditing, ERP security, or IT audit. • Hands-on experience auditing or configuring at least one major ERP (SAP, Oracle, or Microsoft Dynamics), including SoD and access controls. • Working knowledge of application controls, automated controls, and IT audit frameworks (COBIT, ISO 27001) and Saudi regulatory requirements (SAMA CSF, NCA ECC, PDPL). • Strong documentation, analysis, and communication skills, with the ability to translate technical findings into practical business recommendations. • Professional certification such as CISA (held or in progress). • ERP-specific credentials, CISM, or CRISC are an advantage.