PwC Risk IT Audit -Associate / Senior Associate - Riyadh

PwC Middle East; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

PwC Middle East is seeking a Senior Associate in Risk Consulting to help leading enterprises identify, analyze, and respond to technology risks across regional operations. You’ll advise top management, and collaborate with cybersecurity, internal audit, and compliance functions to strengthen controls and resilience.

You’ll assess controls against ISO27001, NIST CSF, ITIL v4, and other standards, deliver actionable insights, and support client relationships while contributing to diverse,

Qualifications

• Bachelor's degree in a related field is required.
• Strong client management and ability to translate requirements into deliverables.
• Experience conducting stakeholder meetings to assess processes, risks and controls.
• Solid knowledge of security industry standards, best practices, tools and methodologies.
• Ability to identify gaps and propose remediation strategies.
• Understanding of risk management methodologies with structured risk analysis.
• Strong communication and presentation skills for technical and non-technical audiences.
• Certifications such as listed preferred: Security+, CISSP, CISA, ISO 27001/22301, CRISC, ITIL Foundations.
• Analytical mindset and collaborative approach to work across diverse teams.

Responsibilities

• Collaborate with regional teams to identify, analyze, prioritize, and respond to technology risks.
• Advise senior management and cybersecurity, internal audit, and compliance on risk matters.
• Maintain up-to-date understanding of IS/Cybersecurity threats, trends and technologies.
• Assess current and emerging technology risks and review the design and effectiveness of controls.
• Deliver actionable insights to safeguard clients' systems and data.
• Collaborate with regional and international teams on key projects.
• Conduct qualitative and quantitative risk assessments and recommend risk responses.
• Support clients in mitigating security and technology risks, including resilience and DR activities.
• Assess environments against ISO27001, NIST CSF, ITILv4, and regional standards for regulatory compliance.
• Contribute to building strong client relationships and key accounts.

Skills

Security certifications

Stakeholder management

Risk assessment

Education

Bachelor's degree in Computer Engineering / Computer Science / IT Management or related field

Tools

ISO 27001

ISO 22301

NIST CSF

ITIL v4

CISA

CompTIA Security+

CRISC

Job description

About Us

With offices in 152 countries and nearly 328,000 professionals, we are one of the world’s leading professional services networks, helping organisations and individuals create lasting value through Assurance, Tax and Advisory services. For over 40 years, we have contributed to the Middle East’s transformation journey, partnering with governments and businesses to deliver sustainable solutions. Today, more than 12,000 of us across Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia and the UAE are shaping the region’s future.

Line Of Service Overview

At PwC Consulting, you’ll shape strategies that redefine industries and drive national visions. We partner with leaders to deliver transformative solutions in enterprise strategy, digital innovation, operational excellence, cyber resilience, and risk management. Join a community that values bold thinking, collaboration, and measurable impact—where your expertise accelerates change and creates lasting value.

Business Unit Overview

As part of the Risk Consulting team, you’ll shape organizations strengthen resilience and build trust by providing end-to-end advisory solutions that enable businesses to align objectives with regulatory requirements, mitigate risks, and meet the diverse needs of critical stakeholders. The Risk Consulting practice offers a comprehensive range of services, including Internal Audit, Enterprise Risk Management, Governance, Policies, and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity. It’s where risk management meets business transformation, backed by insight, powered by purpose.

How You’ll Contribute

As a Senior Associate within Risk, you’ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Responsibilities include but are not limited to:

• Collaborate with a diverse regional team to help leading enterprises identify, analyze, prioritize, and respond to technology risks.
• Advise top management, cybersecurity, internal audit, compliance, and risk management functions within the enterprise on technology risk matters.
• Maintain an up-to-date understanding of the latest Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess both existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to help safeguard clients’ systems and data against potential threats.
• Collaborate with a diverse talent pool of regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management activities.
• Assess clients’ environments against leading international and regional security standards and frameworks, such as ISO27001, NIST CSF, ITILv4, and NCA-ECC, to support regulatory and compliance requirements.
• Contribute to building strong client relationships and the development of key accounts.

What You’ll Bring

• Bachelor's degree in applied sciences such as Computer Engineering, Computer Science, Information Technology Management, or a related field.
• Strong client management skills with the ability to interact effectively, consolidate requirements, and translate them into actionable deliverables.
• Experience conducting stakeholder meetings to assess organizational processes, risks, and controls.
• Solid knowledge of security industry standards, best practices, tools, and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Understanding of risk management methodologies and concepts, with the ability to apply structured approaches to risk analysis and response.
• Strong communication and presentation skills for engaging technical and non-technical audiences.
• Professional certifications preferred: CompTIA Security+, Certified in Cybersecurity (ISC)², CISA, ISO 27001, ISO 22301, CRISC, ITIL Foundations.
• Analytical mindset with the ability to evaluate benefits, drawbacks, and rationale for risk response strategies.
• Professional, adaptable, and collaborative approach to working across diverse teams and projects.

How You’ll Make a Difference

At PwC Midde East, we expect all our people to embody the skills and behaviours of The PwC Professional framework, helping us deliver on our strategy while growing and developing as leaders at every level.

Why You’ll Love Working at PwC

At PwC Middle East, you’ll find more than just a job — you’ll build a meaningful career, supported by rewards and benefits that help you thrive. We offer competitive pay, comprehensive benefits, and programs that promote well-being, balance, and personal growth. You’ll have access to continuous learning, digital upskilling, and a collaborative environment that values innovation, mentorship, and diversity. Are you ready to make a difference? Want to unlock new value by applying your unique perspective and talents? You can grow exponentially here. Discover more about Life at PwC Middle East.