cybersecurity auditor

DBS Bank

<b>Job Summary:</b> The Cybersecurity Regulatory and Compliance Officer is responsible for ensuring the organization’s cybersecurity practices comply with applicable laws, regulations, frameworks, and internal policies. This role bridges the gap between cybersecurity operations and legal/regulatory obligations, ensuring the organization maintains a robust, compliant security posture in a rapidly evolving threat and regulatory landscape.Requirements* Monitor cybersecurity regulationsand frameworks (e.g., NIST, ISO 27001, DPDP, PCI-DSS, CIS controls) relevant to the organization’s operations and industry.* Translate regulatory cybersecurity requirements into actionable internal controls and risk mitigation strategies.* Collaborate with IT, security, audit, and business teams to develop and enforce cybersecurity policies and procedures.* Conduct regular assessments, audits, and gap analyses to ensure compliance with cybersecurity standards and best practices.* Support preparation and response for internal audits, external audits, assessments, and certification efforts (e.g., ISO 27001, PCI-DSS).* Track regulatory changes and provide timely updates to stakeholders, ensuring policies and controls remain current.* Manage cybersecurity risk registers and contribute to enterprise risk management initiatives.* Oversee cybersecurity incident reporting and ensure compliance with breach notification laws.* Prepare and submit cybersecurity-related regulatory filings, documentation, and reports.* Deliver internal training and awareness on cybersecurity compliance requirements and secure practices.Qualifications: * Bachelor’s degree in Cybersecurity, Information Technology, or a related field (Master’s preferred).* 7-10 years of experience in cybersecurity, regulatory compliance, risk management, or related field.* Strong understanding of regulations and compliance (e.g., RBI Cybersecurity Framework, SEBI CSCRF, NIST CSF, ISO/IEC 27001, PCI-DSS, etc.).* Relevant certifications preferred: * Compliance-focused: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Professional (CIPP).* Cybersecurity-focused: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM).* Experience supporting security and compliance audits and working with regulatory bodies or external assessors.* Strong analytical, organizational, and communication skills.Preferred Experience: * Hands-on experience working in regulated industries (e.g., NBFC and Bank ).* Experience in incident response planning and regulatory breach reporting.

Senior Associate, Cybersecurity Regulatory and Compliance Officer, Technology and Operations

Confidential Company

<p>Conduct periodic security audits &amp; assessments (internal &amp; external)</p><ul><li>Review security policies, procedures, standards, and controls</li><li>Assess and validate existing technical and operational security controls</li><li>Risk assessments: identify, evaluate, and prioritize security risks</li><li>Assess maturity of security controls, identify gaps vs frameworks (ISO 27001, NIST, CIS, etc.)</li><li>Review incident response readiness, playbooks, and past incident analyses</li><li>Monitor SOC / threat detection / alerting processes (if applicable) and understand SIEM, IDS/IPS, incident response, threat hunting</li><li>Provide gap analysis against standards (e.g. ISO 27001, NIST CSF, SOC 2)</li><li>Prepare audit findings reports, articulate recommendations and roadmap</li><li>Conduct vendor / third-party security reviews</li><li>Produce findings reports, guide remediation, and follow up to closure</li><li>Review network, endpoint, identity, access, encryption controls, etc</li><li>Mentor internal security staff (if any)</li><li>Stay updated with evolving threats, regulatory changes</li></ul><p><strong>Minimum Qualifications</strong></p><ul><li>Bachelor degree in Computer Science, Information Security, Engineering or equivalent</li><li>5-7 years in cybersecurity / information security roles</li><li>Experience in a SOC environment or with managed detection &amp; response services</li><li>Hands-on experience in security audits and assessments</li><li>Strong technical skills: networking, logging &amp; monitoring, vulnerability management</li><li>Certifications: ISO 27001 LA, ISO 27001 LI, CISA, CISSP, CISM, or equivalent</li><li>Experience with major frameworks (ISO 27001, NIST, SOC, etc.)</li><li>Excellent report writing and stakeholder management skills</li><li>Strong ethical standards, confidentiality, and objectivity</li></ul><p><strong>Preferred / Advantageous</strong></p><ul><li>Experience in your industry or regulatory regime</li><li>Experience in cloud security (AWS, Azure, GCP)</li><li>Experience with threat hunting, red teaming, or offensive security</li><li>ISO 27001 Lead Auditor certification</li><li>Experience in privacy / data protection compliance</li></ul><br/><p>Language </p><p>Arabic &amp; English is a must </p><p> </p>

Information Security Consultant / Auditor

DiXiO Experts

<b>We are hiring!</b> <p></p> <p>DiXiO is on a mission to innovate financial messaging, and now, you can be part of it too!</p> <p>We are looking for a<b> Cybersecurity Auditor </b>who will join a team of experts to help us secure our applications for the financial messaging industry. The role holder is responsible for running independent assessments for our clients to ensure that their infrastructures are safe and secure.</p> <p> <strong>Things you will do:</strong> </p> <div>  Execute the day-to-day activities of IT audit engagements, including planning, fieldwork,</div> <div>reporting and follow up on audit findings</div> <div>  Responsible for leading and delivering audit assignments globally using a risk-based</div> <div>approach to deliver a wide range of IT governance, cyber/IT/data security, risk, and</div> <div>regulatory compliance related audits for various organizations.</div> <div>  Perform risk-based audits and assess the effectiveness of controls in place</div> <div>  Evaluate the design and effectiveness of technology controls throughout the business cycle</div> <div>  Prepare and present written reports and other technical information in a pertinent, concise,</div> <div>and accurate manner for distribution to management/clients and identify and other related</div> <div>stakeholders.</div> <div> <br> </div> <p> <strong>To be part of our team, you need to be:</strong> </p> <ul> <li>Ambitious</li> <li>Curious and Innovative</li> <li>Autonomous</li> <li>Team-player</li> </ul> <p> <strong>Things that you need to succeed on this job:</strong> </p> <ul> <li>1 - 2 years of experience in Cybersecurity and IT Risk Management</li> <li>MS Office 365 Applications </li> <li>Knowledge of Information Security, IT Risk Management, IT Audit, IT Governance, SWIFT CSCF Compliance, ISO/IEC 27001, NIST, COBIT</li> <li>Proficient in English and Arabic</li> <li>Knowledge of IT infrastructure security (firewalls, databases, OS, etc.)  </li> </ul> <p> <strong>Why you will love working with us:</strong> </p> <p>If you are searching for an organization that is willing to invest in your professional career, look no more. We provide our Experts with all the tools and investments needed to fulfil their career and professional aspirations. You also don t need to worry about getting stuck in traffic at 8:00AM, we are 100% remote, and our Experts can work from anywhere! Our team also enjoys an unlimited number of leave days to make sure they are reaching a work-life balance. That s not all, our packages include a medical insurance and performance-based bonus!</p> <p><br></p> 
<div></div>

IT/ Cyber Security Auditor (Remote)

ريناد المجد

<p>As a Cybersecurity Specialist, you will be the cornerstone of our project's security posture. You will be responsible for designing, implementing, and overseeing security measures to protect our digital assets, ensure compliance with national regulations, and embed security into every layer of the enterprise architecture.</p><p><b>Responsibilities</b></p><ul><li><b>Security Architecture &amp; Implementation:</b> Design, implement, and manage security controls and protocols within the enterprise architecture framework.</li><li><b>Compliance &amp; Governance:</b> Ensure strict adherence to all Saudi Arabian cybersecurity, safety, health, and environmental regulations. Lead efforts to achieve and maintain compliance with international standards.</li><li><b>Risk Management:</b> Conduct comprehensive risk assessments, vulnerability scans, and penetration testing. Develop and maintain a continuous risk mitigation strategy.</li><li><b>Incident Response:</b> Serve as a key player in the security incident response team, leading investigations and remediation efforts.</li><li><b>Policy Development:</b> Develop, maintain, and enforce cybersecurity policies, procedures, and standards.</li><li><b>Audit &amp; Assurance:</b> Prepare for and manage internal and external security audits, providing all necessary documentation and evidence.</li></ul><p><b>Qualifications</b></p><ul><li><b>Mandatory Requirements:</b></li><li>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>A minimum of 5 years of professional experience in IT, with at least 3 years of specialized experience in cybersecurity.</li><li>Fluency in Arabic (both written and spoken) is a mandatory requirement for this role.</li><li>Must hold one or more of the following professional certifications:</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CISM (Certified Information Security Manager)</li><li>CISA (Certified Information Systems Auditor)</li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor</li></ul><p>the location in <b>Taif -Saudi Arabia</b></p><p>Job Type: Full-time</p><p>Pay: From &#65020;2.00 per month</p><p>Ability to commute/relocate:</p><ul><li>Taif: Reliably commute or planning to relocate before starting work (Preferred)</li></ul><p>Application Question(s):</p><ul><li>What is your notice period in days ?</li><li>Where do you live ?</li><li>What is your salary expectation ?</li><li>Are you Saudi Arabian ?</li></ul><p>Experience:</p><ul><li> cybersecurity: 3 years (Preferred)</li></ul>

Cyber Security Specialist

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p><br>
Overview: We're seeking a Security Supply Chain Assessor to help protect Amazon's global supply chain through comprehensive security assessments and risk management. This role requires international travel (up to 75%) across APAC, North America, and South America Regions.<br>
The Cybersecurity Supply Chain Assessor plays a critical role in evaluating and strengthening the security posture of third-party manufacturing and supplier partners across the global supply chain. This position involves conducting on-site cybersecurity assessments of supplier facilities, verifying adherence to corporate and industry security standards, and identifying risks related to data protection, software provisioning, and hardware production environments.<br>
The ideal candidate will have deep technical expertise in cybersecurity controls, a strong understanding of manufacturing and supplier ecosystems, and the ability to collaborate cross-functionally with internal and external stakeholders across multiple time zones and regions.<br>
<br>
Key job responsibilities<br>
Conduct on-site cybersecurity assessments of suppliers and contract manufacturers across APAC, North America, and South America.<br>
<br>
Evaluate supplier environments against company and industry security standards (e.g., ISO 27001, NIST 800-171, and internal security frameworks).<br>
<br>
Assess security domains including but not limited to:<br>
o Network segmentation and access control<br>
o Data encryption and protection mechanisms<br>
o Endpoint and server security<br>
o Secure software provisioning and storage<br>
o Incident response and monitoring practices<br>
o Physical and environmental security controls<br>
<br>
Document findings, develop risk ratings, and provide actionable remediation guidance to suppliers.<br>
<br>
Partner with internal security, compliance, and supply chain teams to ensure continuous improvement of supplier risk management programs.<br>
<br>
Track, monitor, and verify closure of remediation actions through follow-up assessments or evidence reviews.<br>
<br>
About the team<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
Why Amazon Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>Bachelor's degree or above in Cybersecurity, Information Security, or a related field</li><li>5+ years of experience in cybersecurity assessments, audits, or supplier security evaluations.</li><li>Experience performing on-site assessments or audits in manufacturing, hardware, or software supply chain environments.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST CSF, or similar).</li><li>Demonstrated ability to communicate complex security concepts to both technical and non-technical audiences.</li><li>Excellent analytical, documentation, and reporting skills.</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Experience working with or assessing suppliers in regulated industries (e.g., electronics manufacturing, cloud hardware, or software supply chain).</li><li>Understanding of software and firmware provisioning security practices.</li><li>Experience with risk management tools and assessment automation platforms.</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company&rsquo;s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<br>
<br>
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $107,400/year in our lowest geographic market up to $229,700/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.</div>

Cybersecurity Supply Chain Mgr, Supply Chain Intellectual Property Security

Omantel

<div>
 <strong>
  Role Purpose
  <br/>
  <br/>
 </strong>
 To conduct Technology/Network Audits independently as per the annual Internal Audit plan, including network infrastructure and security controls review, network access. May be part of a larger team of Lead Auditors / Auditors / Asst. Auditors for large scale Network \ Technology Audits. To conduct Quality Assurance reviews (QAR) and Compliance Monitoring of IT &amp; Network Infrastructure for risk management and effectiveness in accordance with IA Plan and IA Manual.
 <br/>
 <br/>
 <strong>
  Position Information
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Unit: Internal Audit
  </li>
  <li>
   Division: Technology Audit
  </li>
  <li>
   Location: HQ
  </li>
  <li>
   Line Manager: SM &ndash;Technology Audit.
  </li>
  <li>
   Grade: P5
  </li>
  <li>
   Minimum role requirements:
  </li>
  <li>
   Qualification: Bachelor in relevant field, preferably in in Information Technology, Computer Science, or related field. Professional certification such as, CISA \ CISSP \ CEH \CIPM \ CIPP \CISM .
  </li>
  <li>
   Experience: 8 years of experience
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Accountabilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct the assessment of the various aspects of Telecom &amp; IT Network Infrastructure Audits (LAN, WAN, firewalls, switches, routers, and other network components) in accordance with the Internal Audit plan and IA Manual as part of a team of Lead Auditors / Auditors / Asst. Auditors
  </li>
  <li>
   Lead assessment of Network architecture, network configuration, network access checks and security controls of Telecom &amp; IT Networks.
  </li>
  <li>
   Conduct Vulnerability Assessment (VA) and Penetration Testing (PT) to identify possible risks and highlight them in the Internal Audit reports.
  </li>
  <li>
   Coordinate with IT division and department heads along with the Manager, in all matters relating to Telecom &amp; IT Network audit findings, recommendations and required implementation to ensure that all audit observations are communicated and addressed.
  </li>
  <li>
   Document required implementation activities and work closely with Business Units and department heads for audit follow-up and implementation audits.
  </li>
  <li>
   Review and prepared Internal Audit reports for accuracy of findings, observations and clarity of recommendations and corrective actions from the completed Telecom &amp; IT Network Infrastructure audits.
  </li>
  <li>
   Review follow-up audit reports in conjunction with previous audit reports and highlight necessary escalations and corrective actions.
  </li>
  <li>
   Review compliance monitoring reports for identified and recorded areas of gaps, risks and non-compliance leading to Omantel&rsquo;s financial / operational impact in the Audit Report for Audit Committee.
  </li>
  <li>
   Ensure any corrective action requests (CARs) are responded to in a timely manner to ensure the removal of any non-conformances and their root cause identified during QAR.
  </li>
  <li>
   Lead Compliance Monitoring audits to ensure that the operations of the Omantel are being carried out within the legal and regulatory framework of Oman.
  </li>
  <li>
   Highlight areas of gaps, risks and non-compliance during Compliance Monitoring audits that may lead to Omantel&rsquo;s financial / operational impact
  </li>
  <li>
   Provide recommendations to improve existing processes and controls to meet cybersecurity and data privacy standards and mitigate risk.
  </li>
 </ul>
</div>


Lead Auditor, IT Infrastructure

Banque Misr

<div>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Plan and execute IT audits covering applications, databases, operating systems, networks, and infrastructure components.
  </li>
  <li>
   Assess software requirements, IT architecture, and security controls to ensure alignment with risk management and compliance standards.
  </li>
  <li>
   Evaluate risks and controls for software development, IT operations, infrastructure management, and cybersecurity.
  </li>
  <li>
   Conduct audits to assess the design and operating effectiveness of IT general controls (ITGCs) and automated application controls.
  </li>
  <li>
   Document audit findings, prepare clear and concise reports, and communicate results and recommendations to management.
  </li>
  <li>
   Provide consulting services on risk and controls in IT projects, system implementations, and infrastructure changes.
  </li>
  <li>
   Monitor and report on remediation progress for IT audit issues.
  </li>
  <li>
   Stay current on technology trends, cyber threats, and regulatory requirements affecting IT operations.
  </li>
  <li>
   Apply best practices in audit methodologies and maintain independence and objectivity in all assignments.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications and Skills:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   0 to 1 years of experience in data analytics within a Big Four audit firm or the banking sector.
  </li>
  <li>
   Bachelor's degree in information systems, Computer Science, Engineering, Business Informatics, or related IT field.
  </li>
  <li>
   Preferably certified in CISA, COBIT, ISO, CISSP, or other relevant ISACA certifications.
  </li>
  <li>
   Strong analytical thinking and problem-solving skills.
  </li>
  <li>
   Excellent communication and interpersonal skills.
  </li>
  <li>
   Fluency in English and Arabic (both written and spoken).
  </li>
  <li>
   Ability to work independently and collaboratively in a team environment.
  </li>
  <li>
   Eagerness to learn and adapt to new technologies and evolving audit practices.
  </li>
 </ul>
 <p>
 </p>
</div>


Information Technology Auditor for Application and Infrastructure

Search 1418+ Cybersecurity auditor jobs near you this November. New roles added regularly across leading industries. Apply today.