PwC Risk - IT Audit Manager- Riyadh

PwC Middle East; Riyadh; On-site; SAR 300,000 - 520,000; Full time

Job summary

PwC Middle East is seeking a Manager in Technology Risk to lead regional risk assessments and advisory work across cybersecurity, governance, and regulatory compliance.

Qualifications

• Bachelor's degree in a related field (e.g., Computer Engineering, CS, IT).
• Experience with stakeholder meetings to assess processes, risks and controls.
• Solid knowledge of security standards and best practices.
• Identify security gaps and propose remediation strategies.
• Strong risk analysis and response planning skills.
• Excellent communication and presentation abilities.
• Certifications such as CompTIA Security+, CISSP, CISA, ISO 27001, CRISC, ITIL Foundations preferred.
• Collaborative and adaptable in cross-functional teams.

Responsibilities

• Collaborate with a regional team to identify, analyze, prioritize, and respond to technology risks.
• Advise management on technology risk matters across cybersecurity and compliance.
• Maintain understanding of IS threats, trends, and technologies.
• Assess existing and emerging technology risks and review control effectiveness.
• Deliver actionable insights to safeguard systems and data.
• Collaborate with diverse teams to deliver key projects.
• Conduct qualitative and quantitative cybersecurity risk assessments and plan responses.
• Support clients in resilience and disaster recovery activities.
• Assess environments against ISO27001, NIST CSF, ITIL v4, and NCA-ECC.

Skills

Client management

Stakeholder meetings

Security standards knowledge

Risk analysis

Communication skills

Remediation planning

Education

Bachelor's degree in Computer Engineering / CS / IT

Tools

ISO27001

NIST CSF

ITIL v4

NCA-ECC

Job description

About Us

With offices in 152 countries and nearly 328,000 professionals, we are one of the world’s leading professional services networks, helping organisations and individuals create lasting value through Assurance, Tax and Advisory services. For over 40 years, we have contributed to the Middle East’s transformation journey, partnering with governments and businesses to deliver sustainable solutions. Today, more than 12,000 of us across Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia and the UAE are shaping the region’s future.

About Us

With offices in 152 countries and nearly 328,000 professionals, we are one of the world’s leading professional services networks, helping organisations and individuals create lasting value through Assurance, Tax and Advisory services. For over 40 years, we have contributed to the Middle East’s transformation journey, partnering with governments and businesses to deliver sustainable solutions. Today, more than 12,000 of us across Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Palestine, Qatar, Saudi Arabia and the UAE are shaping the region’s future.

Line Of Service Overview

At PwC Consulting, you’ll shape strategies that redefine industries and drive national visions. We partner with leaders to deliver transformative solutions in enterprise strategy, digital innovation, operational excellence, cyber resilience, and risk management. Join a community that values bold thinking, collaboration, and measurable impact—where your expertise accelerates change and creates lasting value.

Business Unit Overview

As part of the Risk Consulting team, you’ll shape organizations strengthen resilience and build trust by providing end-to-end advisory solutions that enable businesses to align objectives with regulatory requirements, mitigate risks, and meet the diverse needs of critical stakeholders. The Risk Consulting practice offers a comprehensive range of services, including Internal Audit, Enterprise Risk Management, Governance, Policies, and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity. It’s where risk management meets business transformation, backed by insight, powered by purpose.

How You’ll Contribute

As a Manager within Technology Risk, you’ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Responsibilities include but are not limited to:

• Collaborate with a diverse regional team to help leading enterprises identify, analyze, prioritize, and respond to technology risks.
• Advise top management, cybersecurity, internal audit, compliance, and risk management functions within the enterprise on technology risk matters.
• Maintain an up-to-date understanding of the latest Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assess both existing and emerging technology risks, and review and test the design and effectiveness of technology controls.
• Deliver actionable insights and recommendations to help safeguard clients’ systems and data against potential threats.
• Collaborate with a diverse talent pool of regional and international teams to successfully deliver key projects.
• Conduct qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas and recommending risk response plans.
• Support and advise clients in mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management activities.
• Assess clients’ environments against leading international and regional security standards and frameworks, such as ISO27001, NIST CSF, ITILv4, and NCA-ECC, to support regulatory and compliance requirements.
• Contribute to building strong client relationships and the development of key accounts.

What You’ll Bring

• Bachelor's degree in applied sciences such as Computer Engineering, Computer Science, Information Technology Management, or a related field.
• Strong client management skills with the ability to interact effectively, consolidate requirements, and translate them into actionable deliverables.
• Experience conducting stakeholder meetings to assess organizational processes, risks, and controls.
• Solid knowledge of security industry standards, best practices, tools, and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Understanding of risk management methodologies and concepts, with the ability to apply structured approaches to risk analysis and response.
• Strong communication and presentation skills for engaging technical and non-technical audiences.
• Professional certifications preferred: CompTIA Security+, Certified in Cybersecurity (ISC)², CISA, ISO 27001, ISO 22301, CRISC, ITIL Foundations.
• Analytical mindset with the ability to evaluate benefits, drawbacks, and rationale for risk response strategies.
• Professional, adaptable, and collaborative approach to working across diverse teams and projects.

How You’ll Make a Difference

At PwC Midde East, we expect all our people to embody the skills and behaviours of The PwC Professional framework, helping us deliver on our strategy while growing and developing as leaders at every level.

Why You’ll Love Working at PwC

At PwC Middle East, you’ll find more than just a job - you’ll build a meaningful career, supported by rewards and benefits that help you thrive. We offer competitive pay, comprehensive benefits and programs that promote well-being, balance, and personal growth. You’ll have access to continuous learning, digital upskilling, and a collaborative environment that values innovation, mentorship, and diversity. Are you ready to make a difference? Want to unlock new value by applying your unique perspective and talents? You can grow exponentially here. Discover more about Life at PwC Middle East.