PwC Risk IT Audit📣 Job Ad

About the Role

PwC is seeking a Manager for its Risk IT Audit team in Riyadh. As part of PwC Consulting, you will contribute to shaping strategies that redefine industries and drive national visions by delivering transformative solutions in areas such as digital innovation, operational excellence, cyber resilience, and risk management. This role is a full-time position within a global professional services network known for creating lasting value through Assurance, Tax, and Advisory services.

Role Context and Contribution

As a Manager within the Technology Risk practice, you will be a key problem solver, addressing complex business issues from strategy through to execution. You will work within the Risk Consulting team, which provides end-to-end advisory solutions to help organizations strengthen resilience, build trust, align objectives with regulatory requirements, mitigate risks, and meet stakeholder needs. The practice encompasses services like Internal Audit, Enterprise Risk Management, Governance, Policies and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity.

Key Responsibilities

• Collaborate with a diverse regional team to assist leading enterprises in identifying, analyzing, prioritizing, and responding to technology risks.
• Advise senior management, cybersecurity, internal audit, compliance, and risk management functions on technology risk matters.
• Maintain an up-to-date understanding of current Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to help safeguard clients’ systems and data.
• Collaborate with regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management.
• Assess clients’ environments against leading international and regional security standards and frameworks, such as ISO27001, NIST CSF, ITILv4, and NCA-ECC, to support regulatory and compliance requirements.
• Contribute to building strong client relationships and the development of key accounts.

Qualifications and Experience

• Bachelor's degree in applied sciences such as Computer Engineering, Computer Science, Information Technology Management, or a related field.
• 5-10 years of relevant experience.
• Strong client management skills with the ability to interact effectively, consolidate requirements, and translate them into actionable deliverables.
• Experience conducting stakeholder meetings to assess organizational processes, risks, and controls.
• Solid knowledge of security industry standards, best practices, tools, and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Understanding of risk management methodologies and concepts, with the ability to apply structured approaches to risk analysis and response.
• Strong communication and presentation skills for engaging technical and non-technical audiences.
• Analytical mindset with the ability to evaluate benefits, drawbacks, and rationale for risk response strategies.
• Professional, adaptable, and collaborative approach to working across diverse teams and projects.

Preferred Professional Certifications

• CompTIA Security+
• Certified in Cybersecurity (ISC)2
• CISA
• ISO 27001
• ISO 22301
• CRISC
• ITIL Foundations

Work Environment and Location

This is a full-time position based in Riyadh. You will be part of a diverse regional team and contribute to PwC's ongoing transformation journey in the Middle East, working with governments and businesses to deliver sustainable solutions.