Application Auditor – Senior Consultant

WE ARE HIRING | Application Auditor – Senior Consultant Location: Riyadh, Saudi Arabia Employment Type: Full-time Travel: Required when needed We are looking for an experienced Application Auditor – Senior Consultant to join a growing IT & Cybersecurity Internal Audit / Risk Advisory team. Key Responsibilities: • Plan and execute application controls reviews across ERP and business applications, including SAP, Oracle, and Microsoft Dynamics. • Assess Segregation of Duties (SoD), user access, authorization, and sensitive access controls. • Test automated business-process controls and IT-dependent manual controls. • Evaluate interfaces, data conversion, and data integrity controls. • Support ITGC and Cybersecurity Audits and assess technology and financial reporting risks. • Evaluate controls against COBIT, ISO/IEC 27001, and relevant Saudi regulatory requirements, including SAMA CSF, NCA ECC, and PDPL. • Prepare audit findings, risk ratings, recommendations, and supporting documentation. • Coordinate with IT, application, and business-process owners. • Contribute to audit methodologies, testing tools, and knowledge sharing. Requirements: • Bachelor’s degree in Computer Science, Information Systems, Accounting Information Systems, or a related field. • 4–6 years of experience in application controls auditing, ERP security, or IT audit. • Hands-on experience with at least one major ERP system: SAP, Oracle, or Microsoft Dynamics. • Experience with SoD and access controls. • CISA certification (completed or in progress) is preferred. CISM, CRISC, or ERP-specific certifications are an advantage. • Knowledge of COBIT, ISO 27001, and Saudi regulatory requirements. • Excellent Arabic and English communication skills. • Strong analytical, documentation, and time-management skills. • Willingness to travel to client sites when required.