IT Audit Manager – Technology Risk (Riyadh)

About the role

As a Manager within Technology Risk, you will join PwC's Risk Consulting team in Riyadh, helping leading enterprises identify, assess and respond to technology risks. You will work closely with senior stakeholders to deliver actionable security insights and support regulatory compliance.

Key responsibilities

• Collaborate with regional teams to analyse, prioritise and respond to technology risk exposures.
• Assess existing and emerging risks, test the design and effectiveness of technology controls, and provide remediation recommendations.
• Conduct qualitative and quantitative cybersecurity risk assessments, identifying high‑risk areas and defining response plans.
• Evaluate client environments against standards such as ISO 27001, NIST CSF, ITIL v4 and NCA‑ECC, supporting compliance and regulatory requirements.
• Build strong client relationships and contribute to the development of key accounts.

Required profile

• Bachelor’s degree in Computer Engineering, Computer Science, Information Technology Management or a related field.
• Strong client‑management skills with experience leading stakeholder meetings to assess processes, risks and controls.
• Solid knowledge of security industry standards, best practices, tools and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Professional certifications such as CompTIA Security+, CISA, ISO 27001, ISO 22301, CRISC or Certified in Cybersecurity (ISC)² are preferred.

Required skills

• NIST Cybersecurity Framework (CSF)
• ISO 27001 and ISO 22301 standards
• ITIL v4
• CISA certification
• CompTIA Security+
• CRISC certification
• NCA‑ECC compliance framework
• Process Intelligence and disaster‑recovery management

What we offer

• Competitive salary and comprehensive benefits package.
• Continuous learning, digital upskilling and professional development programs.
• Collaborative, inclusive environment that values innovation and mentorship.