Job Summary

The IT Auditor plays a critical role in supporting Mowasalat’s vision of delivering agile, safe, and sustainable transport solutions by providing independent and objective assurance on the effectiveness of IT risk management, governance, and control processes. The role is responsible for planning and executing IT audits, evaluating IT systems and controls, assessing compliance with regulatory and organizational requirements, identifying risks, and providing recommendations for improvement. The position contributes to strengthening IT governance, enhancing risk management practices, and ensuring the effectiveness, security, and reliability of Mowasalat’s information technology environment.

Key Responsibilities:

IT Audit Planning & Execution

• Plan and execute IT audit assignments, including risk assessments, audit procedures, and reporting activities.
• Develop an understanding of audited activities, including associated IT risks and controls.
• Identify and assess IT audit risks and recommend strategies to mitigate identified risks.

IT Systems & Controls Evaluation

• Evaluate IT systems, applications, and infrastructure to ensure compliance with regulatory requirements and company policies.
• Assess the design and effectiveness of IT controls across infrastructure, applications, and data security environments.
• Identify audit findings and provide recommendations for process and control improvements.

IT Governance & Compliance

• Review IT governance frameworks, strategies, policies, and procedures to ensure alignment with organisational objectives.
• Assess compliance with regulatory requirements, industry standards, and internal policies.
• Identify governance and compliance gaps and recommend corrective actions and remediation plans.

IT Risk Management

• Support the development and maintenance of IT risk management plans, risk assessments, and mitigation strategies.
• Monitor and evaluate IT risk management controls and processes to ensure effective risk mitigation.
• Identify operational, compliance, and security-related IT risks and contribute to risk reduction initiatives.

Reporting & Follow-Up

• Prepare and present IT audit reports, including executive summaries, findings, conclusions, and recommendations.
• Track and follow up on audit findings to ensure recommendations are implemented and sustained.
• Communicate audit outcomes effectively to management and stakeholders to drive improvements in governance and control processes.

Governance, Confidentiality & Continuous Improvement

• Ensure the highest standards of confidentiality and protection of sensitive organisational information.
• Contribute to continuous enhancement of IT governance, risk management, and internal control frameworks.

Qualifications & Requirements:

Education

• Bachelor’s degree or equivalent in Computer Science / Information Technology & Information Systems, or an accredited IT/IS Audit certification such as CISA, CISSP, or ACDA is preferred.

Experience

• Minimum 3 years of experience in IT auditing, IT risk management, or a related field.
• Experience within the transportation sector or a highly reputed organisation in a similar or equivalent role is preferred.

Certifications & Training (Preferred)

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• Certified Internal Auditor (CIA).

Skills & Competencies

• Hands-on experience with Microsoft Power BI.
• Data analytics experience, preferably with scripting tools such as ACL Analytics or similar software.
• Experience auditing IT General Controls (ITGCs), Application Controls, and IT Frameworks.
• Working knowledge of SAP ERP systems.
• Strong audit report writing and documentation skills.
• Cybersecurity auditing, risk management, or security assessment experience.