Risk IT Audit Associate / Senior Associate – Riyadh

About the role

Join PwC Middle East’s Risk Consulting team in Riyadh as a Senior Associate focused on IT audit and technology risk. You will work with a diverse regional team to help leading enterprises identify, analyse and respond to technology‑related risks, supporting top‑level management and cybersecurity functions.

Key responsibilities

• Collaborate with regional teams to assess and prioritise technology risks for large enterprises.
• Advise senior management, internal audit, compliance and risk functions on technology risk matters.
• Maintain up‑to‑date knowledge of information security threats, trends and technologies.
• Assess existing and emerging technology risks and test the design and effectiveness of controls.
• Conduct qualitative and quantitative cybersecurity risk assessments and recommend risk‑response plans.
• Evaluate client environments against standards such as ISO 27001, NIST CSF, ITIL v4 and NCA‑ECC.

Required profile

• Bachelor’s degree in Computer Engineering, Computer Science, IT Management or a related field.
• Strong client‑management skills with experience leading stakeholder meetings to assess processes, risks and controls.
• Solid knowledge of security industry standards, best practices and remediation techniques.
• Understanding of risk‑management methodologies and ability to apply structured risk analysis.
• Professional certifications preferred (e.g., CompTIA Security+, CISA, ISO 27001, CRISC, ITIL Foundations).

Required skills

• Internal Audit
• NCA‑ECC
• Compliance
• NIST CSF
• CISA
• ITIL Foundations / ITIL v4
• Risk Management
• Information Security (IS)
• CompTIA Security+
• CRISC
• Technology risk
• ISO 22301
• Cybersecurity
• ISO 27001