Senior Consultant - Internal Controls and Governance

Ernst & Young Advisory Services Sdn Bhd; Dubai; On-site; AED 300,000 - 550,000; Full time

Benefits offered by this job

Continuous learning

Diverse and inclusive culture

Transformative leadership

Job summary

Ernst & Young Advisory Services Sdn Bhd in Dubai seeks a Senior Consultant for Internal Controls and Governance to strengthen IT governance, controls design, and risk management across finance and IT systems. You will work on ICFR/SOX aligned engagements, develop RCMs, and advise on ERP and automation impacts.

The role emphasizes technology-driven governance, BCP/DRP resilience, and data integrity controls, with leadership responsibilities and mentorship within multi-engagement teams.

Qualifications

• Bachelor's degree in Information Systems, IT, Computer Science, or related field.
• Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent.
• Experience in Big 4 or consulting with IT audits, risk assessments, and controls testing (SOX/ICFR).
• Experience designing IT governance frameworks, BCP/DRP, and cybersecurity policies.
• Developing risk registers, RCMs, and process flow documentation.

Responsibilities

• Lead engagements focused on IT risk assessments, controls design, and governance frameworks.
• Evaluate IT systems (ERPs, reporting) to identify risks affecting financial processes.
• Develop risk control matrices, risk registers, and audit-ready docs for IT environments.
• Advise on IT governance including BCP/DRP resilience and data integrity controls.
• Collaborate with finance teams on how applications and tech impact outcomes.
• Mentor junior staff on IT audit methodologies and compliance standards.
• Ensure adherence to Quality & Risk Management protocols while enabling innovation.

Skills

ITGCs

ITACs

Risk assessment

Control testing

ERP risk & controls

GRC platforms

Data analytics

Leadership

English fluency

Education

Bachelor's degree in Information Systems/IT/CS

Tools

Power BI

Tableau

SAP

Oracle

GRC platforms

Job description

Senior Consultant - Internal Controls and Governance

Location: Dubai

Other locations: Primary Location Only

Date: 23 Sept 2026

Requisition ID: 1746544

In Financial Accounting Advisory Services (FAAS), we partner with clients to address complex accounting, governance, and risk management challenges. You will join a team that empowers finance functions through governance, risk mitigation, and controls optimization, leveraging technology to strengthen financial reporting integrity and corporate resilience. With EY’s global resources and MENA expertise, you will drive innovation in finance and tech-enabled governance while building a career that shapes a better working world.

That is how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities.

Sound interesting? Well this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

The Opportunity

EY’s MENA practice is a leader in advising governments, private enterprises, and multinationals on Internal Controls over Financial Reporting (ICFR) and Governance that bridge finance and IT. Role Key focus areas include:

• IT Governance & Controls : Designing and assessing IT General Controls (ITGCs), IT Application Controls (ITACs), Business Continuity Planning (BCP), Disaster Recovery Planning (DRP), and technology frameworks / policies.
• Risk & Controls Transformation : Developing risk control matrices (RCMs), risk registers, and evaluating the impact of systems/processes on financial reporting.
• Technology-Driven Financial Reporting : Advising on ERP implementations, system migrations, and automation tools (e.g: processes automation) to enhance reporting accuracy.
• Regulatory & Compliance : Aligning IT policies with standards (e.g: COSO, COBIT, ISO 27001) and emerging regulations.

We seektechnology-first professionalswho excel at translating IT risks into actionable business insights while driving governance excellence.

Your Key Responsibilities

• Lead engagements focused on IT risk assessments, controls design, and governance frameworks, ensuring alignment with financial reporting requirements (e.g: ICFR, SOX).
• Evaluate IT systems (e.g: ERPs, reporting and financial reporting systems) to identify risks affecting financial processes and recommend mitigation strategies.
• Develop risk control matrices (RCMs), risk registers, and audit-ready documentation for IT environments.
• Advise on IT governance, including BCP/DRP resilience, IT policies, and data integrity controls.
• Collaborate with finance teams to assess how applications, system configurations, and emerging technologies (e.g: AI, blockchain) impact financial outcomes.
• Mentor junior staff on IT audit methodologies, risk management tools, and compliance standards.
• Ensure adherence to Quality & Risk Management (Q&RM) protocols while fostering innovation in client deliverables.

Skills for Success

• Technical Expertise : Understanding of ITGCs, ITACs, application security, and system dependencies in financial reporting.
• Risk Management : Proficiency in risk assessments, RCMs, control testing, and audit frameworks (e.g: COSO, COBIT).
• Analytical Mindset : Ability to analyse complex IT environments and articulate risks to both technical and non-technical stakeholders.
• Tools Proficiency : Advanced skills in Microsoft Office; familiarity with data analytics tools (Power BI, Tableu), ERP systems (SAP, Oracle), or GRC platforms is a plus.
• Leadership : Experience managing teams across multiple engagements with competing deadlines.
• Language : Fluent in English (Arabic preferred).

Qualifications

• Bachelor’s degree in Information Systems, IT, Computer Science, or related field.
• Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus).
• Experience in a Big 4 or consulting role, with hands‑on experience in:
• IT audits, risk assessments, and controls testing (SOX/ICFR environments).
• Designing IT governance frameworks, BCP/DRP, and cybersecurity policies.
• Developing risk registers, RCMs, and process flow documentation.

Ideally, you’ll also have

• Proficiency in the Arabic language

What we look for

We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally. You will be business savvy with a passion for innovation as well as the motivation to create your own EY journey.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on performance and recognized for the value you bring to our business. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll embrace who you are and empowered to use your voice to help others find theirs.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.