Senior IT Risk & Cybersecurity Auditor

PwC Middle East; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

PwC Middle East is seeking a Senior Associate in Risk Consulting to help leading enterprises identify, analyze, and respond to technology risks across regional operations. You’ll advise top management, and collaborate with cybersecurity, internal audit, and compliance functions to strengthen controls and resilience.

You’ll assess controls against ISO27001, NIST CSF, ITIL v4, and other standards, deliver actionable insights, and support client relationships while contributing to diverse,

Qualifications

• Bachelor's degree in a related field is required.
• Strong client management and ability to translate requirements into deliverables.
• Experience conducting stakeholder meetings to assess processes, risks and controls.
• Solid knowledge of security industry standards, best practices, tools and methodologies.
• Ability to identify gaps and propose remediation strategies.
• Understanding of risk management methodologies with structured risk analysis.
• Strong communication and presentation skills for technical and non-technical audiences.
• Certifications such as listed preferred: Security+, CISSP, CISA, ISO 27001/22301, CRISC, ITIL Foundations.
• Analytical mindset and collaborative approach to work across diverse teams.

Responsibilities

• Collaborate with regional teams to identify, analyze, prioritize, and respond to technology risks.
• Advise senior management and cybersecurity, internal audit, and compliance on risk matters.
• Maintain up-to-date understanding of IS/Cybersecurity threats, trends and technologies.
• Assess current and emerging technology risks and review the design and effectiveness of controls.
• Deliver actionable insights to safeguard clients' systems and data.
• Collaborate with regional and international teams on key projects.
• Conduct qualitative and quantitative risk assessments and recommend risk responses.
• Support clients in mitigating security and technology risks, including resilience and DR activities.
• Assess environments against ISO27001, NIST CSF, ITILv4, and regional standards for regulatory compliance.
• Contribute to building strong client relationships and key accounts.

Skills

Security certifications

Stakeholder management

Risk assessment

Education

Bachelor's degree in Computer Engineering / Computer Science / IT Management or related field

Tools

ISO 27001

ISO 22301

NIST CSF

ITIL v4

CISA

CompTIA Security+

CRISC

Job description

PwC Middle East is seeking a Senior Associate in Risk Consulting to help leading enterprises identify, analyze, and respond to technology risks across regional operations. You’ll advise top management, and collaborate with cybersecurity, internal audit, and compliance functions to strengthen controls and resilience.

You’ll assess controls against ISO27001, NIST CSF, ITIL v4, and other standards, deliver actionable insights, and support client relationships while contributing to diverse,