IT Auditor (APAC)

The Opportunity:

• Permanent role
• Work location: Town
• Work hours: Mon to Fri 9am - 6pm

Adecco is partnering with recognised organisation and they are looking for IT Auditor (APAC) to join the Team! A great opportunity to work with the company who value growth opportunities, trainings and diversity.

Responsibilities:

• Led high-risk IT and Cybersecurity audits covering vulnerability management, penetration testing, IAM, firewall and security configuration reviews, change management, data privacy, and data security across IT/OT environments.
• Conducted regulatory and compliance audits aligned with SAMA Cybersecurity Framework, NCA ECC/CSCC/CCC, PDPL, HIPAA, SOC 2 Type II, ISO 27001, ISO 20000, and ISO 9001, ensuring adherence to local and international standards.
• Performed enterprise-wide IT and cybersecurity audits, including security architecture, incident response readiness, cloud security, IT service management, business continuity, and disaster recovery, ensuring RTOs and RPOs were met.
• Identified control gaps, security weaknesses, and misconfigurations across firewalls, IDS/IPS, SIEM, DLP, MDM, NAC, databases, and critical servers, providing actionable recommendations to strengthen controls and governance.
• Led the implementation, operation, and internal audits of ISO 27001 ISMS across multiple regions; served as focal point for NCA cybersecurity standards and ISO compliance initiatives.
• Designed and executed risk-based audit programs, including risk assessments, control testing, and detailed audit procedures, while collaborating closely with IT and business stakeholders.
• Implemented and managed GRC and security platforms, including Archer (Audit, Risk, Control, Vulnerability Management), TeamMate+, IBM QRadar SIEM, endpoint protection, and MDM solutions.
• Drove cybersecurity awareness programs and maintained continuous alignment with emerging threats, technologies, and industry best practices.

Requirements:

• Bachelor's or Master's degree in Information Systems, Computer Science, Information Technology, Business Administration, or a related discipline
• Professional security certifications such as CISSP, CCSP, CISM, CISA, CCNA, ISO/IEC 27001:2013 Lead Auditor, and IBM QRadar are highly desirable.
• Strong expertise in IT and cybersecurity audits and technology risk management, with solid knowledge of ISO 27001, 27701, 20000, 31000, and 22301 standards, ITIL processes, data privacy, and compliance with KSA regulatory requirements
• Willing to travel as required for business purposes

Next Step:

• Prepare your updated resume please include detailed past working experiences in point form, an executive summary about yourself in terms of experience, expertise, key achievements & highlight and your current & expected package.
• Apply through this application or send your resume to [email protected]. We regret to inform only shortlisted candidate will be notified

Personnel Registration Number: R22107719