PwC Risk IT Audit📣 Job Ad

About the Role

PwC Middle East is seeking a Manager for its Technology Risk team in Riyadh. This role is part of a global professional services network dedicated to creating lasting value through Assurance, Tax, and Advisory services. With a significant presence across the Middle East, PwC partners with organizations to deliver sustainable solutions and drive transformation.

Role Context and Contribution

As a Manager within Technology Risk, you will contribute to solving complex business issues from strategy through execution. You will work within the Risk Consulting practice, which provides end-to-end advisory solutions focused on strengthening organizational resilience, building trust, and aligning business objectives with regulatory requirements. The practice offers services including Internal Audit, Enterprise Risk Management, Governance, Policies and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity.

Key Responsibilities

• Collaborate with a diverse regional team to help leading enterprises identify, analyze, prioritize, and respond to technology risks.
• Advise top management, cybersecurity, internal audit, compliance, and risk management functions on technology risk matters.
• Maintain an up-to-date understanding of Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to safeguard clients’ systems and data.
• Collaborate with diverse regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management.
• Assess clients’ environments against international and regional security standards and frameworks such as ISO27001, NIST CSF, ITILv4, and NCA-ECC.
• Contribute to building strong client relationships and the development of key accounts.

Qualifications and Experience

• Bachelor's degree in applied sciences such as Computer Engineering, Computer Science, Information Technology Management, or a related field.
• 5-10 years of relevant experience.
• Strong client management skills with the ability to interact effectively, consolidate requirements, and translate them into actionable deliverables.
• Experience conducting stakeholder meetings to assess organizational processes, risks, and controls.
• Solid knowledge of security industry standards, best practices, tools, and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Understanding of risk management methodologies and concepts, with the ability to apply structured approaches to risk analysis and response.
• Strong communication and presentation skills for engaging technical and non-technical audiences.
• Professional certifications are preferred, including CompTIA Security+, Certified in Cybersecurity (ISC)2, CISA, ISO 27001, ISO 22301, CRISC, ITIL Foundations.
• Analytical mindset with the ability to evaluate benefits, drawbacks, and rationale for risk response strategies.
• Professional, adaptable, and collaborative approach to working across diverse teams and projects.

Work Environment

This is a full-time position based in Riyadh. At PwC Middle East, employees are expected to embody the skills and behaviors of The PwC Professional framework, contributing to the firm's strategy and their own development as leaders.