PwC Risk IT Audit Manager

About PwC Middle East

PwC is a global network of professional services with offices in 152 countries and nearly 328,000 professionals. The firm provides Assurance, Tax, and Advisory services, helping organizations and individuals create lasting value. For over 40 years, PwC has contributed to the Middle East’s transformation, partnering with governments and businesses to deliver sustainable solutions. Currently, over 12,000 professionals across the region, including Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia, and the UAE, are involved in shaping the future of the region.

The Consulting Practice and Risk Consulting Team

Within PwC Consulting, professionals develop strategies that redefine industries and support national visions. The practice collaborates with leaders to deliver transformative solutions in areas such as enterprise strategy, digital innovation, operational excellence, cyber resilience, and risk management. The Risk Consulting team focuses on strengthening organizational resilience and building trust by providing end-to-end advisory solutions. These solutions enable businesses to align objectives with regulatory requirements, mitigate risks, and meet stakeholder needs. The practice offers services including Internal Audit, Enterprise Risk Management, Governance, Policies and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity.

About the Role: Risk IT Audit Manager

PwC Middle East is seeking a Risk IT Audit Manager to join its Technology Risk team in Riyadh, Saudi Arabia. This full-time role involves working as part of a team of problem solvers to address complex business issues from strategy to execution. The Manager will contribute to strengthening client resilience and building trust through advisory solutions that align objectives with regulatory requirements and mitigate risks. The role requires 2-5 years of experience.

Key Responsibilities

• Collaborate with a diverse regional team to assist leading enterprises in identifying, analyzing, prioritizing, and responding to technology risks.
• Advise top management, cybersecurity, internal audit, compliance, and risk management functions on technology risk matters.
• Maintain an up-to-date understanding of the latest Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to help safeguard client systems and data against potential threats.
• Collaborate with regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management activities.
• Assess client environments against leading international and regional security standards and frameworks, such as ISO27001, NIST CSF, ITILv4, and NCA-ECC, to support regulatory and compliance requirements.
• Contribute to building strong client relationships and the development of key accounts.

Working at PwC Middle East

PwC Middle East expects all its professionals to embody the skills and behaviors outlined in The PwC Professional framework, which supports the firm's strategy and fosters leadership development at all levels. The firm offers competitive pay, comprehensive benefits, and programs designed to promote well-being, work-life balance, and personal growth. Employees have access to continuous learning, digital upskilling, and a collaborative environment that values innovation, mentorship, and diversity.