Technology & Cyber Advisory Lead

Grant Thornton UAE; Dubai; Presencial; AED 260.000 - 420.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible work arrangements

Professional development support

Wellbeing initiatives

Descripción de la vacante

Grant Thornton UAE seeks an experienced Assistant Manager to lead complex technology risk, IT audit, cybersecurity, regulatory compliance, resilience, and emerging technology engagements. The role requires strong technical knowledge, defined assessment approaches, and the ability to manage multidisciplinary delivery while presenting significant risks to senior client stakeholders.

The successful candidate will supervise delivery teams across financial services, government, critical

Formación

• Six to eight years of relevant experience in IT audit, technology risk, cybersecurity, regulatory compliance, cloud security, BCM, disaster recovery, or related advisory services
• Demonstrated experience leading complex technology and cybersecurity assessments
• Strong knowledge of UAE IA, NIST, ISO 27001, and relevant Central Bank cybersecurity or technology risk frameworks
• Experience leading core banking, critical application, SOC, SIEM, security solution, cloud, data centre, BCM, or disaster recovery reviews
• Strong understanding of security technologies, including PAM, IAM, EDR/XDR, IDS/IPS, SIEM, SOAR, DLP, WAF, vulnerability management, and cloud-security solutions
• Experience defining technical assessment approaches, reviewing evidence, challenging conclusions, and presenting significant risks to senior stakeholders
• Experience supervising technical teams and reviewing client deliverables
• CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, ISO 22301, ISO 42001, CCSP, CCSK, AZ-500, SC-100, SC-200, AWS Security Specialty, CEH, CREST, OSCP, GIAC, PMP, or an equivalent relevant certification

Responsabilidades

• Lead IT audits, ITGC assessments, technology risk reviews, application control reviews, technology governance assessments, and pre- and post-implementation reviews
• Define risk-based work programmes and review coverage across applications, databases, operating systems, networks, cloud platforms, interfaces, infrastructure, and data centres
• Lead cybersecurity maturity, compliance, gap, and regulatory assessments against UAE Information Assurance Standards, NIST CSF, ISO 27001, CIS Controls, PCI DSS, SWIFT CSP, and applicable Central Bank cybersecurity and technology risk frameworks
• Review maturity methodologies, control mappings, regulatory self-assessments, management attestations, risk ratings, and prioritised remediation roadmaps
• Lead reviews of core banking and critical applications, covering system architecture, access, configurations, product parameters, segregation of duties, interfaces, batch processing, audit trails, availability, and recovery
• Lead technical assessments of IDS/IPS, firewalls, WAF, PAM, IAM, EDR/XDR, DLP, SIEM, SOAR, vulnerability-management, email-security, and cloud-security solutions
• Assess security-tool architecture, configuration, integration, coverage, administration, monitoring, lifecycle management, and alignment with regulatory and risk requirements
• Lead SOC and SIEM assessments covering operating models, log-source coverage, detection use cases, threat intelligence, alert handling, incident escalation, threat hunting, retention, tuning, orchestration, and service-provider governance
• Oversee vulnerability management, penetration testing, secure configuration, application security, API security, cyber incident readiness, and technical remediation reviews
• Lead cloud security reviews across Microsoft Azure, AWS, Microsoft 365, and hybrid or multi-cloud environments
• Lead BCM, disaster recovery, ICT continuity, cyber resilience, and operational resilience assessments, including BIA, RTO and RPO alignment, recovery architecture, crisis management, testing, and third-party resilience
• Lead data centre reviews covering physical and environmental security, power, cooling, fire protection, network redundancy, server and storage infrastructure, backup, capacity, availability, and single points of failure
• Lead data protection, privacy, Microsoft Purview, AI governance, and emerging technology assessments, including reviews against ISO 42001 and the NIST AI Risk Management Framework
• Define engagement approaches, evidence requirements, testing methodologies, maturity-rating criteria, and reporting structures
• Review working papers, technical assessments, observations, maturity ratings, risk conclusions, and client reports to ensure they are complete and evidence-based
• Manage client workshops, status meetings, validation discussions, and presentations to senior technology, cyber, audit, risk, and business stakeholders
• Supervise project teams, allocate technical workstreams, review deliverables, and provide technical guidance
• Support technical proposals, scope development, effort estimation, and the development of new Technology and Cyber Advisory offerings

Descripción del empleo

Grant Thornton UAE seeks an experienced Assistant Manager to lead complex technology risk, IT audit, cybersecurity, regulatory compliance, resilience, and emerging technology engagements. The role requires strong technical knowledge, defined assessment approaches, and the ability to manage multidisciplinary delivery while presenting significant risks to senior client stakeholders.

The successful candidate will supervise delivery teams across financial services, government, critical