Risk IT Audit Associate / Senior Associate

About PwC Middle East

Operating across 152 countries and employing nearly 328,000 professionals, PwC stands as a premier global professional services firm delivering Assurance, Tax, and Advisory services. For over four decades, we have actively participated in transforming the Middle East, collaborating with governments and businesses to create sustainable solutions. Currently, more than 12,000 employees across Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia, and the UAE are driving regional progress.

Service and Business Unit Overview

Within PwC Consulting, you will engage in shaping strategic initiatives that redefine sectors and contribute to national goals. We join forces with leaders to implement transformative strategies involving enterprise strategy, digital innovation, operational excellence, cyber resilience, and risk management. The Risk Consulting practice focuses on enabling organizations to build trust and resilience by providing comprehensive advisory services, including Internal Audit, Enterprise Risk Management, Governance, Control over Financial Reporting, Process Intelligence, Compliance, and Technology Risk and Cybersecurity.

Key Responsibilities

• Work collaboratively with a diverse regional team to help major enterprises recognize, analyze, prioritize, and address technology-related risks.
• Offer guidance to senior management, cybersecurity, internal audit, compliance, and risk teams on issues related to technology risks.
• Stay informed about current Information Security and cybersecurity threats, trends, and technological advancements.
• Evaluate existing and emerging technology risks; test and review the design and operational effectiveness of technology controls.
• Provide insightful and practical recommendations to protect clients' systems and data from potential cybersecurity threats.
• Work alongside regional and global teams to successfully implement key projects.
• Perform both qualitative and quantitative cybersecurity risk assessments, pinpoint high-risk areas, and advise on risk mitigation strategies.
• Assist clients in reducing current and future technology and security risks, including efforts related to organizational resilience and disaster recovery management.
• Assess client environments against leading international and regional frameworks such as ISO27001, NIST CSF, ITILv4, and NCA-ECC to fulfill compliance and regulatory requirements.
• Contribute to building robust client relationships and aid in developing major accounts.

Qualifications and Skills

• Bachelor’s degree in fields such as Computer Engineering, Computer Science, Information Technology Management, or related disciplines.
• Strong client relationship management abilities capable of effectively gathering requirements and translating them into practical deliverables.
• Experience leading stakeholder consultations to evaluate organizational processes, identify risks, and review controls.
• Comprehensive knowledge of security industry standards, best practices, and methodologies.
• Capability to identify technological security deficiencies and recommend appropriate corrective measures.
• Understanding of risk management principles and the application of structured risk analysis and response techniques.
• Excellent communication and presentation skills to engage both technical and non-technical audiences.
• Professional certifications such as CompTIA Security+, Certified in Cybersecurity (ISC)², CISA, ISO 27001, ISO 22301, CRISC, and ITIL Foundation are preferred.
• Analytical thinking to assess advantages, disadvantages, and reasoning behind risk mitigation strategies.
• Professionalism, adaptability, and teamwork mentality across diverse projects and teams.

Why Join PwC Middle East

PwC Middle East fosters not just employment but meaningful career paths, supported by competitive salaries, comprehensive benefits, and initiatives promoting well-being, balance, and personal development. Employees benefit from continual learning opportunities, digital skill enhancement, and a culture that values innovation, mentoring, and diversity. Our commitment to The PwC Professional framework empowers all colleagues to develop as leaders and contribute effectively to the firm's strategy and impact.