Senior Tech Risk Consultant - GCC National

About the role

EY MENA is hiring a Senior Consultant for its Technology Risk service in the GCC, based in Al Khobar. The role supports the growth of the Technology Risk practice in MENA and involves delivering and leading IT and cybersecurity projects across many industries, with minimal supervision, and helping clients where there are no off-the-shelf solutions.

Key responsibilities

• Lead and deliver engagements with very minimal supervision, ensuring the quality of final reports for clients.
• Support executives on proposals, presentations and other business development activities.
• Deliver engagements in Technology Risk with a proven track record; a Big 4 background or comparable consulting experience is highly advantageous.

Required profile

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science or a related field.
• Minimum of 3 to 5 years of experience in IT audit, information security or related fields.
• Professional certifications such as CISA, CISSP, CISM or ISO 27001 Lead Auditor are preferred.
• Ability to work independently and collaboratively within a team.

Required skills

• Risk and governance frameworks: IT governance (COBIT, ITIL, NIST), ISO 27001, information security principles, policy development and risk assessment.
• IT systems audit: planning, execution, audit methodologies, control weakness identification and communicating findings.
• Internal controls over financial reporting (ICFR), ITGCs, ITACs, SOX requirements and liaison with financial auditors.
• Application systems such as SAP, Oracle, Microsoft Dynamics and operating systems and databases.
• Business continuity planning (BCP/DRP), business impact analysis and plan testing.
• Cybersecurity fundamentals and strong analytical, problem-solving, communication and presentation skills.