Cyber Risk & IT Audit Assistant Manager

Tanqeeb; Abu Dhabi; On-site; AED 250,000 - 420,000; Full time

Job summary

Grant Thornton UAE is seeking an Assistant Manager in Business Risk Services to lead end-to-end IT audit and technology risk engagements across public sector and large private sector clients in the UAE. You will oversee ITGCs, ERP controls, data protection, and business continuity considerations aligned with UAE regulations.

You will manage engagement teams, present findings to audit committees, and contribute to BD efforts while building strong client relationships and delivering value-driven

Qualifications

• 7+ years of related work experience in Technology Risk, IT Audit, ICFR, SOX, or ERP assurance engagements
• Bachelor’s or Master’s degree in Information Systems or Technology, Computer Science, Engineering, or a related discipline
• Professional certifications such as CISA, CISM, CISSP, ISO 27001 (Any 2)
• ERP platform certifications or hands-on experience in Oracle ERP / Oracle Fusion, SAP (Preferred)
• Prior experience delivering ICFR / ITGC / SOX-style controls, technology risk, or assurance engagements within UAE or GCC organizations
• Working knowledge of UAE and regional regulatory frameworks, such as: UAE Internal Audit Standards, IA 2025 Controls, ISO 27001, NESA, NCEMA, ADGM FSRA, DIFC, or sector-specific regulations (government, financial services, energy)
• Familiarity with outsourced IT environments, managed service providers, and third-party risk considerations common in the region
• Strong stakeholder management skills, with experience interacting with senior management, internal audit, compliance, and IT leadership
• Arabic language skills are an advantage (spoken and/or written), but not mandatory
• Ability to work in onsite client environments and meet UAE client delivery and security clearance requirements
• Having the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment
• Having the ability to document testing in a highly detailed and exacting manner
• Ability to supervise staff members and word on multiple projects simultaneously
• Experience of preparing and delivering presentations

Responsibilities

• Leading and managing end-to-end IT audit and technology risk engagements for public sector, government-related entities, and large private sector clients across the UAE
• Overseeing evaluation of IT General Controls (ITGCs), ERP controls, cloud environments, and data protection requirements
• Planning, coordinating, and executing risk-based audit approaches supporting ICFR/SOX and regulatory engagements
• Managing engagement teams, including task allocation, coaching, and review of workpapers
• Presenting scope, observations, risk implications, and remediation actions to clients and audit committees
• Leading third-party risk management reviews, including vendor contracts and regulatory alignment within the UAE
• Building trusted client relationships as the primary GT UAE point of contact for IT, Finance, Risk, and Internal Audit
• Providing pragmatic insights on technology and cyber risk trends affecting UAE organizations
• Contributing to business development, proposals, and thought leadership for GT UAE
• Collaborating with other GT UAE service lines to deliver integrated assurance and advisory outcomes

Skills

IT Audit

Technology Risk

SOX/ICFR

ERP Assurance

Vendor/Stakeholder Mgmt

Regulatory Awareness

Data Privacy/BCP

Cybersecurity

Client Presentations

Risk Advisory

Education

Bachelor’s or Master’s in Information Systems / Technology / CS / Engineering

Tools

Oracle ERP / Oracle Fusion

SAP

Job description

Grant Thornton UAE is seeking an Assistant Manager in Business Risk Services to lead end-to-end IT audit and technology risk engagements across public sector and large private sector clients in the UAE. You will oversee ITGCs, ERP controls, data protection, and business continuity considerations aligned with UAE regulations.

You will manage engagement teams, present findings to audit committees, and contribute to BD efforts while building strong client relationships and delivering value-driven