PwC
IT Audit Manager, Technology Risk
- Permanent
- Riyadh, Saudi Arabia
- Experience 2 - 5 yrs
Job expiry date: 27/11/2026
Job overview
Date posted
13/10/2026
Location
Riyadh, Saudi Arabia
Salary
SAR 20,000 - 30,000 per month
Compensation
Comprehensive package
Experience
2 - 5 yrs
Seniority
Manager
Qualification
Bachelors degree
Expiration date
27/11/2026
Job description
Technology risk keeps shifting, and the enterprises PwC works with in Saudi Arabia need someone who can tell them which risks matter most and what to do about them. This IT Audit Manager role in Riyadh sits within Technology Risk, part of PwC's Risk Consulting practice. Top management, cybersecurity, internal audit, compliance and risk management functions all come to you for advice. Much of the hands-on work involves reviewing and testing the design and effectiveness of technology controls, and running qualitative and quantitative information and cybersecurity risk assessments. Client environments are measured against ISO27001, NIST CSF, ITILv4 and NCA-ECC to support regulatory and compliance requirements. Some projects extend into organizational resilience and disaster recovery management. Keeping current on IS and cybersecurity threats, trends and technologies is part of the job, as is building strong client relationships and growing key accounts. Certifications such as CISA, CRISC, ISO 27001, ISO 22301, CompTIA Security+, Certified in Cybersecurity (ISC)² or ITIL Foundations are preferred.
Required skills
Key responsibilities
- Collaborate with a diverse regional team to help enterprises identify, analyze, prioritize and respond to technology risks
- Advise top management and cybersecurity, internal audit, compliance and risk management functions on technology risk matters
- Maintain an up-to-date understanding of IS and cybersecurity threats, trends and technologies
- Assess existing and emerging technology risks
- Test the design and effectiveness of technology controls
- Deliver actionable insights and recommendations that protect client systems and data
- Partner with regional and international teams to deliver key projects
- Conduct qualitative and quantitative information and cybersecurity risk assessments, recommending risk response plans for high-risk areas
- Support clients in mitigating security and technology risks, including organizational resilience and disaster recovery management
- Evaluate client environments against ISO27001, NIST CSF, ITILv4 and NCA-ECC to support regulatory and compliance requirements
- Build strong client relationships and help develop key accounts
Experience & skills
- Hold a bachelor's degree in Computer Engineering, Computer Science, Information Technology Management or a related field
- Manage client interactions effectively, consolidating requirements into actionable deliverables
- Lead stakeholder meetings to assess organizational processes, risks and controls
- Apply solid knowledge of security industry standards, practices, tools and methodologies
- Identify technical security gaps and propose effective remediation strategies
- Understand risk management methodologies and apply structured approaches to risk analysis and response
- Weigh the benefits, drawbacks and rationale of different risk response strategies
- Present clearly to technical and non-technical audiences
- Possess professional certifications such as CompTIA Security+, Certified in Cybersecurity (ISC)², CISA, ISO 27001, ISO 22301, CRISC or ITIL Foundations (preferred)