Senior Consultant - Internal Controls and Governance

Ernst & Young AE; Dubai; On-site; AED 250,000 - 400,000; Full time

Job summary

Ernst & Young AE in Dubai seeks an IT Audit & Risk professional to strengthen FAAS offerings. You will assess IT controls, governance, and the impact of IT on financial reporting, guiding clients through risk mitigation and assurance activities.

You will mentor teams, collaborate with finance, and help implement COSO/COBIT aligned controls while advancing technology-enabled governance across engagements.

Qualifications

• Bachelor's degree in information systems/IT/computer science or related field.
• Professional certifications: CISA, CISSP, CRISC, ISO 27001 Lead Auditor (beneficial).
• Experience in IT audits, risk assessments and controls testing (SOX/ICFR).
• Knowledge of IT governance frameworks incl. BCP/DRP and cybersecurity policies.

Responsibilities

• Lead IT risk assessments, design controls and governance frameworks.
• Evaluate ERP systems and IT environments for financial reporting impact.
• Develop risk registers, RCMs and audit-ready IT documentation.
• Advise on IT governance including BCP/DRP resilience and data integrity.

Skills

ITGCs

ITACs

Risk management

Risk assessments

RCMs

Audit frameworks

COSO

COBIT

Analytical mindset

Leadership

Communication

Education

Bachelor's degree in Information Systems

Bachelor's degree in IT

Bachelor's degree in Computer Science

Professional certifications (CISA, CISSP, CRISC, ISO 27001 Lead Auditor)

Tools

SAP

Oracle

GRC platforms

Job description

In Financial Accounting Advisory Services FAAS we partner with clients to address complex accounting governance and risk management challenges You will join a team that empowers finance functions through governance risk mitigation and controls optimization leveraging technology to strengthen financial reporting integrity and corporate resilience With EY s global resources and MENA expertise you will drive innovation in finance and tech-enabled governance while building a career that shapes a better working world That is how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders and in so doing play a critical role in building a better working world for our people for our clients and for our communities Sound interesting Well this is just the beginning Because whenever you join however long you stay the exceptional EY experience lasts a lifetime

The Opportunity

EY s MENA practice is a leader in advising governments private enterprises and multinationals on Internal Controls over Financial Reporting ICFR and Governance that bridge finance and IT Role Key focus areas include IT Governance amp Controls Designing and assessing IT General Controls ITGCs IT Application Controls ITACs Business Continuity Planning BCP Disaster Recovery Planning DRP and technology frameworks policies Risk amp Controls Transformation Developing risk control matrices RCMs risk registers and evaluating the impact of systems processes on financial reporting Technology-Driven Financial Reporting Advising on ERP implementations system migrations and automation tools e g processes automation to enhance reporting accuracy Regulatory amp Compliance Aligning IT policies with standards e g COSO COBIT ISO 27001 and emerging regulations We seek technology-first professionals who excel at translating IT risks into actionable business insights while driving governance excellence

Your Key Responsibilities

Lead engagements focused on IT risk assessments controls design and governance frameworks ensuring alignment with financial reporting requirements e g ICFR SOX Evaluate IT systems e g ERPs reporting and financial reporting systems to identify risks affecting financial processes and recommend mitigation strategies Develop risk control matrices RCMs risk registers and audit-ready documentation for IT environments Advise on IT governance including BCP DRP resilience IT policies and data integrity controls Collaborate with finance teams to assess how applications system configurations and emerging technologies e g AI blockchain impact financial outcomes Mentor junior staff on IT audit methodologies risk management tools and compliance standards Ensure adherence to Quality amp Risk Management Q amp RM protocols while fostering innovation in client deliverables

Skills for Success

Technical Expertise Understanding of ITGCs ITACs application security and system dependencies in financial reporting Risk Management Proficiency in risk assessments RCMs control testing and audit frameworks e g COSO COBIT Analytical Mindset Ability to analyse complex IT environments and articulate risks to both technical and non-technical stakeholders Tools Proficiency Advanced skills in Microsoft Office familiarity with data analytics tools Power BI Tableu ERP systems SAP Oracle or GRC platforms is a plus Leadership Experience managing teams across multiple engagements with competing deadlines Language Fluent in English Arabic preferred

Qualifications

Bachelor s degree in Information Systems IT Computer Science or related field Professional certification CISA CISSP CRISC ISO 27001 Lead Auditor or equivalent ACCA CIA CRMA is a plus Experience in a Big 4 or consulting role with hands‑on experience in IT audits risk assessments and controls testing SOX ICFR environments Designing IT governance frameworks BCP DRP and cybersecurity policies Developing risk registers RCMs and process flow documentation Ideally you ll have Proficiency in the Arabic language What we look for We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally

Qualifications

• Bachelor s degree in Information Systems, IT, Computer Science, or related field.
• Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus).
• Experience in a Big 4 or consulting role, with hands‑on experience in: IT audits, risk assessments, and controls testing (SOX/ICFR environments).
• Designing IT governance frameworks, BCP/DRP, and cybersecurity policies.
• Developing risk registers, RCMs, and process flow documentation.

Ideally, you ll also have Proficiency in the Arabic language

What we look for

We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally. You will be business savvy with a passion for innovation as well as the motivation to create your own EY journey.