Tabby

Lead Auditor – IT & Cyber Security Audit

Tanger-Tétouan-Al Hoceïma

CDI / Temps pleinSur siteLicence / Bac+3AnglaisAudit / Contrôle de gestionBanque

L’essentiel du poste

Résumé par Postule AI

Lead IT and cybersecurity audit engagements at Tabby, a fintech organization. Oversee audit teams in executing comprehensive IT general controls, application controls, and cybersecurity assessments. Develop audit programs, conduct technical testing, identify control gaps, and drive remediation of findings. Requires 5+ years of IT audit or information security experience, strong knowledge of auditing standards and SAMA regulations, and proficiency with IT audit tools and cloud platforms.

Vos missions

  • Lead end-to-end planning and execution of IT general controls, application controls, and cybersecurity audit engagements from scoping through reporting
  • Develop detailed audit programs and risk and control matrices (RCMs) aligned with the approved audit plan
  • Supervise and review fieldwork of audit team members, ensuring quality and adherence to methodology
  • Conduct technical walkthroughs, interviews, and testing of IT controls, network security, identity and access management, and cloud configurations
  • Identify control gaps, draft actionable audit findings and recommendations, and engage with process owners on corrective action plans
  • Coach audit team members on IT audit techniques and support Audit Manager with quarterly and annual reporting

Profil recherché

  • You have 5+ years of IT audit or information security experience, preferably in banking or fintech
  • You are knowledgeable about IT auditing standards, cybersecurity frameworks, and SAMA regulations
  • You have strong technical skills in assessing IT controls and cloud platform configurations
  • You excel at communicating complex technical findings to non-technical stakeholders
  • You hold or are pursuing CISA certification and want to lead audit teams

Généré automatiquement à partir de l’offre. Postule AI peut se tromper : vérifiez auprès de l’employeur.

Overview

As Audit Lead for IT & Cyber Security Audit, you will lead end-to-end execution of IT, cybersecurity, and technology audit engagements. You will supervise engagement teams and deliver high-quality audit results aligned with Tabby's technology risk-based audit plan.

Key Responsibilities

  • Lead planning and execution of IT general controls, application controls, and cybersecurity audit engagements from scoping through reporting
  • Develop detailed audit programs and risk and control matrices (RCMs) covering IT and cyber risk areas aligned with the approved audit plan
  • Supervise and review fieldwork of Senior Auditors, Auditors, and Interns, ensuring quality and adherence to methodology
  • Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations
  • Identify control gaps and root causes; draft clear, actionable audit findings and recommendations on technology and cyber risk
  • Draft audit reports and present engagement results to Engineering and Information Security process owners
  • Engage with technology process owners to validate findings, agree on corrective action plans, and set remediation timelines
  • Track and follow up on implementation of IT and cyber audit recommendations
  • Contribute to annual technology and cyber risk assessment for assigned systems and platforms
  • Coach and provide on-the-job guidance to audit team members on IT audit techniques
  • Support the Audit Manager in preparing quarterly and annual IT/cyber audit reporting materials
  • Stay current on IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements

Required Skills & Expertise

  • 5+ years of experience in IT audit, information security, or technology risk, including leading audit engagements in banking, fintech, or corporate environments
  • Strong knowledge of IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements
  • Experience assessing IT general controls, application controls, and cybersecurity controls
  • Strong communication and interpersonal skills to engage with technology process owners and present findings
  • Strong analytical and problem-solving skills with detail-oriented approach
  • Proficiency in IT audit tools and familiarity with cloud platforms (AWS/Azure/GCP)
  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field
  • CISA certification (obtained or in progress) highly desirable

Mise en forme par Postule ·

Signaler un problème