Risk IT Audit Senior Associate - Riyadh

About the Role
As a Senior Associate within the Risk Consulting team, you will contribute to shaping organizations' resilience and trust through end-to-end advisory solutions. Your work will help businesses align their objectives with regulatory requirements, mitigate risks, and meet the diverse needs of their critical stakeholders. The Risk Consulting practice offers a wide range of services including Internal Audit, Enterprise Risk Management, Governance, Policies and Procedures, Internal Control over Financial Reporting, Process Intelligence and Compliance, and Technology Risk and Cybersecurity. This role blends risk management with business transformation, supported by insight and driven by purpose.

How You’ll Contribute
In this role, you will work as part of a team of problem solvers, tackling complex business issues from strategy to execution. Responsibilities include, but are not limited to:

• Collaborating with a diverse regional team to assist leading enterprises in identifying, analyzing, prioritizing, and responding to technology risks.
• Advising top management, cybersecurity, internal audit, compliance, and risk management functions on technology risk matters.
• Keeping abreast of the latest Information Security (IS) and cybersecurity threats, trends, and technologies.
• Assessing existing and emerging technology risks while reviewing and testing the design and effectiveness of technology controls.
• Delivering actionable insights and recommendations to safeguard clients’ systems and data against potential threats.
• Collaborating with a regional and international talent pool to successfully deliver key projects.
• Conducting qualitative and quantitative information and cybersecurity risk assessments, identifying high-risk areas, and recommending risk response plans.
• Supporting and advising clients on mitigating existing and future security and technology risks, including organizational resilience and disaster recovery management activities.
• Assessing clients’ environments against leading international and regional security standards and frameworks (e.g., ISO27001, NIST CSF, ITILv4) to support regulatory and compliance requirements.
• Contributing to building strong client relationships and developing key accounts.

What You’ll Bring

• A Bachelor’s degree in applied sciences such as Computer Engineering, Computer Science, Information Technology Management, or a related field.
• Strong client management skills with an ability to interact effectively, consolidate requirements, and translate them into actionable deliverables.
• Experience in conducting stakeholder meetings to assess organizational processes, risks, and controls.
• Solid knowledge of security industry standards, best practices, tools, and methodologies.
• Ability to identify technical security gaps and propose effective remediation strategies.
• Understanding of risk management methodologies and concepts, with the ability to apply structured approaches to risk analysis and response.
• Strong communication and presentation skills for engaging both technical and non-technical audiences.
• Preferred professional certifications: CompTIA Security+, Certified in Cybersecurity (ISC)², CISA, ISO 27001, ISO 22301, CRISC, ITIL Foundations.
• An analytical mindset with the capacity to evaluate benefits, drawbacks, and rationale for risk response strategies.
• A professional, adaptable, and collaborative approach to working across diverse teams and projects.

Why You’ll Love Working Here
At the company, you will build a meaningful career supported by rewards and benefits that help you thrive. We offer competitive pay, comprehensive benefits, and programs that promote well-being, balance, and personal growth. You’ll have access to continuous learning, digital upskilling, and a collaborative environment that values innovation, mentorship, and diversity.

Are you ready to make a difference? Unlock new value by applying your unique perspective and talents and grow exponentially here.