Director of Technology Audit (Saudi National)

Director of Technology Audit (Saudi National

Location: Riyadh, Saudi Arabia

Reports To: Executive Director, Internal Audit

Role Overview

We are seeking a highly experienced and strategic Director of Technology Audit to lead the organization's technology audit function. This role is responsible for developing and executing a risk-based audit strategy covering Operational Technology (OT), Core IT, ERP environments, and Cybersecurity.

The successful candidate will be a senior leader who can provide independent assurance over technology risks while acting as a trusted advisor to executive management. This individual must be capable of operating at both a strategic and technical level, with the ability to influence senior stakeholders and drive continuous improvement across the control environment.

Key Responsibilities

• Develop and execute the Technology Audit strategy aligned with the Internal Audit function's objectives.
• Lead the annual risk assessment process and develop a comprehensive technology audit plan.
• Oversee audits across:
• Operational Technology (OT) environments
• Core IT infrastructure and operations
• ERP systems and business applications
• Cybersecurity and information security programs
• Digital transformation initiatives and emerging technologies
• Evaluate the effectiveness of technology governance, risk management, and internal controls.
• Provide independent assurance on key technology risks and strategic initiatives.
• Present audit results, risk insights, and recommendations to senior management and audit leadership.
• Monitor and validate remediation of audit findings.
• Lead, mentor, and develop a high-performing technology audit team.
• Stay current on industry trends, technology risks, cyber threats, and regulatory developments.
• Support special reviews, investigations, and advisory engagements as required.

Mandatory Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Engineering, Cybersecurity, or a related field.
• Minimum 15 years of relevant experience in Technology Audit, IT Risk, Cybersecurity, or Internal Audit.
• Minimum 7 years in a senior leadership role managing technology audit or technology risk functions.
• Proven experience auditing OT, Core IT, ERP platforms, and Cybersecurity environments within large and complex organizations.
• Professional certifications such as CIA, CISA, CISSP, CRISC, or CGEIT are mandatory, with preference given to candidates holding multiple certifications.
• Strong understanding of technology governance, risk management frameworks, cybersecurity principles, and internal control standards.
• Demonstrated ability to engage and challenge senior executives and business leaders.
• Excellent communication, stakeholder management, and report-writing capabilities.
• Fluency in English is required.

Preferred Industry Experience

Priority will be given to candidates with experience in

• Energy, Utilities, or Critical Infrastructure
• Industrial or Manufacturing environments with significant OT footprints
• Telecommunications
• Financial Services
• Large government or semi-government organizations