Senior Consultant – Technology Risk

About the role

EY is expanding its Technology Risk practice in the MENA region and seeks a Senior Consultant to lead and deliver IT and cybersecurity engagements for a variety of clients in Qatar. The role combines hands‑on technical work with client interaction, proposal development and business development activities.

Key responsibilities

• Lead end‑to‑end technology risk engagements with minimal supervision, ensuring high‑quality deliverables.
• Develop proposals, presentations and other business development materials for senior executives.
• Perform IT systems audits, risk assessments, and internal control reviews, including ITGCs and ITACs.
• Support financial audits by providing expertise on SOX, ICFR and related controls.
• Advise clients on governance frameworks (COBIT, ITIL, NIST) and ISO 27001 implementation.
• Assess and improve business continuity and disaster recovery plans.
• Collaborate with client IT teams on SAP, Oracle, Microsoft Dynamics and related environments.

Required profile

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science or a related field.
• 3–5 years of experience in IT audit, technology risk or comparable consulting work.
• Prior experience in a Big 4 or similar professional services environment is highly advantageous.
• Relevant certifications such as CISA, CISSP, CISM or ISO 27001 Lead Auditor are preferred.

Required skills

• Risk and governance frameworks: COBIT, ITIL, NIST, ISO 27001.
• IT systems audit methodology and execution.
• Internal controls over financial reporting (ICFR), ITGCs, ITACs, SOX.
• Enterprise applications: SAP, Oracle, Microsoft Dynamics.
• Business continuity planning (BCP) and disaster recovery (DRP).
• Fundamentals of cybersecurity, threat and vulnerability assessment.