Grant Thornton
Assistant Manager, Cyber Assurance and IT Audit
- Permanent
- Abu Dhabi, United Arab Emirates
- Experience 5 - 10 yrs
Job expiry date: 28/11/2026
Job overview
Date posted
14/10/2026
Location
Abu Dhabi, United Arab Emirates
Salary
Undisclosed
Compensation
Comprehensive package
Experience
5 - 10 yrs
Seniority
Senior & Lead
Qualification
Bachelors degree
Expiration date
28/11/2026
Job description
Public sector bodies, government-related entities and large private companies across the UAE are the clients for this Assistant Manager in Grant Thornton's Business Risk Services team in Abu Dhabi. IT audit and technology risk engagements run end to end under your lead, from risk-based planning to the final report. Testing covers IT General Controls (ITGCs), ERP application controls in Oracle, SAP and Microsoft Dynamics, cloud environments and data protection, supporting ICFR/SOX, internal audit and regulatory assurance. Business continuity work follows ISO 22301 and NCEMA, and third-party risk management (TPRM) reviews look at vendor contracts for cybersecurity, data privacy, BCP/DR and audit rights. Clients and audit committees hear scope, observations and remediation actions from you directly. Engagement teams rely on you for task allocation, coaching and workpaper review. Proposals, client presentations and thought leadership form part of the role too, often alongside GT's Internal Audit, Cybersecurity, Enterprise Risk and Data & Analytics teams. Expect to bring 7 or more years in technology risk, IT audit, ICFR, SOX or ERP assurance, along with two of CISA, CISM, CISSP or ISO 27001, and the ability to work on client sites under UAE security clearance requirements.
Required skills
Key responsibilities
- Lead end-to-end IT audit and technology risk engagements for public sector, government-related and large private sector clients in line with GT UAE methodologies and quality standards
- Oversee the evaluation of IT General Controls (ITGCs)
- Execute ERP application controls testing across Oracle, SAP and Microsoft Dynamics
- Assess cloud environments, data protection requirements under UAE data regulations and GDPR, and business continuity arrangements aligned to ISO 22301 and NCEMA
- Plan risk-based audit approaches that turn complex IT and business application environments into practical testing strategies for ICFR/SOX, internal audit and regulatory assurance
- Manage engagement teams through task allocation, coaching, on-the-job training and workpaper review
- Present scope, observations, risk implications and remediation actions to clients and audit committees
- Draft clear, defensible audit reports
- Monitor closure of agreed management actions
- Conduct third-party risk management reviews of vendor contracts covering governance, cybersecurity, data privacy, BCP/DR, audit rights and regulatory alignment
- Build trusted relationships as a primary GT UAE contact for IT, Finance, Risk and Internal Audit stakeholders
- Advise clients on technology and cyber risk trends, including cloud adoption, ERP transformations, AI initiatives and operational resilience
- Contribute to business development through proposals, commercial scoping, client presentations, thought leadership and methodology development
- Collaborate with GT UAE Internal Audit, Cybersecurity, Enterprise Risk and Data & Analytics teams on integrated engagements
Experience & skills
- Bring 7 or more years of related experience in Technology Risk, IT Audit, ICFR, SOX or ERP assurance engagements
- Hold a bachelor's or master's degree in Information Systems or Technology, Computer Science, Engineering or a related discipline
- Possess at least two professional certifications from CISA, CISM, CISSP and ISO 27001
- Offer ERP platform certifications or hands-on experience in Oracle ERP, Oracle Fusion or SAP (preferred)
- Show prior experience delivering ICFR, ITGC, SOX-style controls, technology risk or assurance engagements in UAE or GCC organizations
- Apply working knowledge of UAE and regional frameworks such as UAE Internal Audit Standards, IA 2025 Controls, ISO 27001, NESA, NCEMA, ADGM FSRA and DIFC
- Understand outsourced IT environments, managed service providers and related third-party risks
- Engage confidently with senior management, internal audit, compliance and IT leadership
- Document testing in a highly detailed and exacting manner
- Supervise staff across multiple engagements and competing priorities
- Deliver clear presentations to client audiences
- Meet onsite client delivery and UAE security clearance requirements
- Speak or write Arabic (an advantage)