Application Auditor - Senior Consultant

We are looking for an experienced Application Auditor – Senior Consultant to join a growing IT & Cybersecurity Internal Audit / Risk Advisory team. Key Responsibilities: Plan and execute application controls reviews across ERP and business applications, including SAP, Oracle, and Microsoft Dynamics. Assess Segregation of Duties (SoD), user access, authorization, and sensitive access controls. Test automated business-process controls and IT-dependent manual controls. Evaluate interfaces, data conversion, and data integrity controls. Support ITGC and Cybersecurity Audits and assess technology and financial reporting risks. Evaluate controls against COBIT, ISO/IEC 27001, and relevant Saudi regulatory requirements, including SAMA CSF, NCA ECC, and PDPL. Prepare audit findings, risk ratings, recommendations, and supporting documentation. Coordinate with IT, application, and business-process owners. Contribute to audit methodologies, testing tools, and knowledge sharing. Requirements: Bachelor’s degree in Computer Science, Information Systems, Accounting Information Systems, or a related field. 4–6 years of experience in application controls auditing, ERP security, or IT audit. Hands-on experience with at least one major ERP system: SAP, Oracle, or Microsoft Dynamics. Experience with SoD and access controls. CISA certification (completed or in progress) is preferred. CISM, CRISC, or ERP-specific certifications are an advantage. Knowledge of COBIT, ISO 27001, and Saudi regulatory requirements. Excellent Arabic and English communication skills. Strong analytical, documentation, and time-management skills. Willingness to travel to client sites when required.