IT Controls & Governance Consultant (ICFR/SOX)

Ernst & Young AE; Dubai; On-site; AED 250,000 - 400,000; Full time

Job summary

Ernst & Young AE in Dubai seeks an IT Audit & Risk professional to strengthen FAAS offerings. You will assess IT controls, governance, and the impact of IT on financial reporting, guiding clients through risk mitigation and assurance activities.

You will mentor teams, collaborate with finance, and help implement COSO/COBIT aligned controls while advancing technology-enabled governance across engagements.

Qualifications

• Bachelor's degree in information systems/IT/computer science or related field.
• Professional certifications: CISA, CISSP, CRISC, ISO 27001 Lead Auditor (beneficial).
• Experience in IT audits, risk assessments and controls testing (SOX/ICFR).
• Knowledge of IT governance frameworks incl. BCP/DRP and cybersecurity policies.

Responsibilities

• Lead IT risk assessments, design controls and governance frameworks.
• Evaluate ERP systems and IT environments for financial reporting impact.
• Develop risk registers, RCMs and audit-ready IT documentation.
• Advise on IT governance including BCP/DRP resilience and data integrity.

Skills

ITGCs

ITACs

Risk management

Risk assessments

RCMs

Audit frameworks

COSO

COBIT

Analytical mindset

Leadership

Communication

Education

Bachelor's degree in Information Systems

Bachelor's degree in IT

Bachelor's degree in Computer Science

Professional certifications (CISA, CISSP, CRISC, ISO 27001 Lead Auditor)

Tools

SAP

Oracle

GRC platforms

Job description

Ernst & Young AE in Dubai seeks an IT Audit & Risk professional to strengthen FAAS offerings. You will assess IT controls, governance, and the impact of IT on financial reporting, guiding clients through risk mitigation and assurance activities.

You will mentor teams, collaborate with finance, and help implement COSO/COBIT aligned controls while advancing technology-enabled governance across engagements.