IT Application Auditor

We're Hiring | IT Application Auditor | Riyadh, Saudi Arabia OptiClaim Business Solutions is hiring on behalf of a client for a Senior IT Application Auditor to support IT application audit engagements across enterprise applications and business-critical systems. Location: Riyadh, Saudi Arabia Experience: 10–12 Years Employment Type: Full-Time Role Summary: You'll evaluate application controls, IT General Controls (ITGC), business process controls, application security, and technology risks across ERP and enterprise systems, assessing configurations, user access, segregation of duties (SoD), interfaces, and change management processes. Key Responsibilities: - Conduct risk-based IT application audits across ERP and business applications - Review ITGC: user access, privileged access, password management, change management, backup/recovery, logging & monitoring - Evaluate application security controls: authentication, RBAC, SoD, workflow approvals, audit trails - Assess interfaces, integrations, APIs, and data flow controls - Perform user access reviews (provisioning, de-provisioning, recertification) - Assess change/release management and deployment processes - Review database security controls - Identify risks, control gaps, and remediation measures - Prepare audit documentation, reports, and executive summaries - Track remediation actions through to closure Required Expertise: - 10–12 years in IT Audit, Application Audit, Information Security, Technology Risk, or Internal Audit - Consulting background preferred, ideally with a Big 4 firm - IT audit methodologies and risk-based auditing - UAM, IAM, SoD, RBAC, application configuration controls - Change/release management, interface & integration controls - Database security, logging/audit trails, backup & recovery - Enterprise applications: SAP, Oracle EBS, Oracle Fusion Cloud, MS Dynamics 365, Workday, Salesforce, ServiceNow Frameworks: COBIT, ISO/IEC 27001, NIST CSF, CIS Controls, PCI DSS, NCA ECC, NCA DCC, SAMA CSF, PDPL Qualifications: Bachelor's in Computer Science, IT, Information Systems, Cybersecurity, or related. Certifications required/preferred: CISA highly preferred. CISM, CRISC, CISSP, or ISO/IEC 27001 Lead Auditor also a plus.