Senior Consultant | Technology & Cyber Advisory | Technology Risk

Grant Thornton; Abu Dhabi; On-site; AED 300,000 - 420,000; Full time

Benefits offered by this job

Flexible work arrangements

Professional development support

Job summary

Grant Thornton UAE is seeking a technically strong Senior Consultant to deliver technology risk, IT audit, cybersecurity, regulatory compliance, resilience, and emerging technology engagements. The role requires hands-on experience assessing complex technology environments and developing practical recommendations.

The successful candidate will independently manage workstreams and support engagements across regulated sectors.

Qualifications

• 4 to 6 years of relevant experience in IT audit, technology risk, cybersecurity, cloud security, or related advisory services.
• Hands‑on experience with ITGC, cybersecurity, infrastructure, cloud, or regulatory assessments.
• Knowledge of UAE IA, NIST, ISO 27001 and Central Bank cybersecurity requirements.

Responsibilities

• Execute IT audits and technology risk assessments across diverse engagements.
• Review access management, change management, IT operations, and security controls.
• Assess cybersecurity maturity, regulatory readiness against UAE standards and frameworks.
• Lead client interviews, evidence reviews, and prepare working papers and reports.
• Guide junior team members and review technical outputs.

Education

CISA

CISM

ISO 27001 Lead Auditor

CCSP

Job description

Job description

About Us

Grant Thornton UAE is a leading professional services firm, providing audit and assurance, tax and advisory services across multiple industries. We have served public and private sector clients in the United Arab Emirates (UAE) for almost 60 years and are committed to delivering quality and excellence driven by fresh thinking, diverse perspectives and a personalised approach. Grant Thornton UAE is part of a global network of independent firms with over 76,000 professionals across 150 markets.
We're driven by a purpose of shaping the world we live in, grounded in trust, integrity and the belief that dynamic businesses and thriving communities go hand in hand. By living our purpose and focusing on quality in everything we do, we strive to be the go-to firm for growth.

At Grant Thornton UAE, our people drive our impact. With over 50 nationalities represented across our teams, we’re proud to foster a culture that celebrates diversity, empowers individuals and delivers meaningful outcomes for our clients and communities. Our unique environment combines the opportunities of a major global organisation with the connection and collaboration of a close‑knit firm.

Here, you can widen your opportunities. Be inspired. Be challenged. Be yourself. Here, you can.

Service Line Overview

Our Advisory practice helps organisations solve their most critical challenges across strategy, operations, risk, and technology. We work with clients to improve performance, manage uncertainty, and unlock sustainable growth. Our multidisciplinary teams combine deep technical expertise with commercial insight, delivering solutions across Business Advisory, Financial Advisory, Mergers & Acquisitions / Transaction Advisory and Technology & Digital Advisory.

Role Overview

We are seeking a technically strong Senior Consultant to deliver technology risk, IT audit, cybersecurity, regulatory compliance, resilience, and emerging technology engagements. The role requires hands‑on experience assessing complex technology environments, identifying control weaknesses, analysing technical evidence, and developing practical recommendations. The successful candidate will independently manage assigned workstreams, conduct client walkthroughs and technical assessments, prepare high‑quality working papers and reports, and support engagements across financial services, government, critical infrastructure, and other regulated sectors.

Key Responsibilities

• Execute IT audits, ITGC reviews, technology risk assessments, application control reviews, pre‑ and post‑implementation reviews, and technology project assurance engagements
• Review technology controls across access management, privileged access, change management, IT operations, interfaces, automated controls, backup, incident management, logging, and monitoring
• Conduct cybersecurity maturity, gap, compliance, and regulatory‑readiness assessments against UAE Information Assurance Standards, NIST CSF, ISO 27001, CIS Controls, PCI DSS, SWIFT CSP, and applicable Central Bank cybersecurity and technology risk frameworks
• Perform reviews of core banking and critical business applications, including access, configuration, product parameters, maker‑checker controls, interfaces, batch processing, transaction logging, change management, and resilience
• Assess the design, configuration, coverage, integration, and operational effectiveness of cybersecurity solutions, including IDS/IPS, firewalls, WAF, PAM, IAM, EDR/XDR, DLP, SIEM, SOAR, vulnerability management, email security, and cloud security tools
• Conduct SOC and SIEM assessments covering log‑source onboarding, monitoring coverage, detection use cases, alert triage, incident escalation, threat intelligence, retention, tuning, and managed service‑provider performance
• Review vulnerability management, penetration testing, patch management, secure configuration, application security, and remediation processes
• Conduct cloud security reviews across Microsoft Azure, AWS, Microsoft 365, and hybrid environments, including identity, network security, encryption, logging, monitoring, data protection, workloads, and cloud governance
• Perform Business Continuity Management, disaster recovery, ICT continuity, and operational resilience assessments, including BIA, recovery strategies, RTOs, RPOs, continuity plans, recovery testing, and third‑party dependencies
• Review primary and disaster recovery data centres, including physical security, environmental controls, power and cooling, fire protection, network redundancy, backup infrastructure, monitoring, and maintenance
• Support data protection, privacy, Microsoft Purview, AI governance, and emerging technology risk assessments, including reviews against ISO 42001 and the NIST AI Risk Management Framework
• Lead client interviews, walkthroughs, evidence reviews, and observation‑validation discussions for assigned workstreams
• Prepare risk and control matrices, working papers, maturity assessments, observations, reports, dashboards, and remediation roadmaps
• Guide junior team members and review selected technical outputs

Success Criteria

• 4 to 6 years of relevant experience in IT audit, technology risk, cybersecurity, cloud security, regulatory compliance, BCM, disaster recovery, or related advisory services
• Practical experience conducting ITGC, cybersecurity, infrastructure, application, cloud, or regulatory assessments
• Working knowledge of UAE IA, NIST, ISO 27001, and relevant Central Bank cybersecurity or technology risk requirements
• Experience reviewing security solutions such as PAM, EDR, SIEM, IDS/IPS, DLP, firewalls, and vulnerability‑management platforms
• Experience assessing core banking or critical applications, SOC operations, cloud environments, data centres, BCM, or disaster recovery
• Ability to analyse technical evidence and develop clear, defensible findings and recommendations
• CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, ISO 22301, ISO 42001, CCSP, CCSK, AZ-500, SC-100, SC-200, AWS Security Specialty, CEH, CREST, OSCP, GIAC, or an equivalent relevant certification

Our Values

• Collaboration – Ask for help, give help – we work well together
• Leadership – Have courage and inspire others – we challenge each other to be the best we can be
• Excellence – Find a better way every time – we never get complacent
• Agility – Think broadly, act quickly – we thrive in change
• Responsibility – Use influence wisely – we own our actions
• Respect – Listen and understand, be forthright – we create honest relationships

Our Benefits

We offer a competitive compensation package, flexible work arrangements, professional development support, and a range of wellbeing and community initiatives—designed to help you thrive personally and professionally.