Senior Consultant - Internal Controls and Governance

In Financial Accounting Advisory Services (FAAS), we partner with clients to address complex accounting, governance, and risk management challenges. You will join a team that empowers finance functions through governance, risk mitigation, and controls optimization, leveraging technology to strengthen financial reporting integrity and corporate resilience. With EY s global resources and MENA expertise, you will drive innovation in finance and tech-enabled governance while building a career that shapes a better working world. That is how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities. Sound interesting? Well this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. The Opportunity EY s MENA practice is a leader in advising governments, private enterprises, and multinationals on Internal Controls over Financial Reporting (ICFR) and Governance that bridge finance and IT. Role Key focus areas include: IT Governance & Controls : Designing and assessing IT General Controls (ITGCs), IT Application Controls (ITACs), Business Continuity Planning (BCP), Disaster Recovery Planning (DRP), and technology frameworks / policies. Risk & Controls Transformation : Developing risk control matrices (RCMs), risk registers, and evaluating the impact of systems/processes on financial reporting. Technology-Driven Financial Reporting : Advising on ERP implementations, system migrations, and automation tools (e.g: processes automation) to enhance reporting accuracy. Regulatory & Compliance : Aligning IT policies with standards (e.g: COSO, COBIT, ISO 27001) and emerging regulations. We seek technology-first professionals who excel at translating IT risks into actionable business insights while driving governance excellence. Your Key Responsibilities Lead engagements focused on IT risk assessments, controls design, and governance frameworks, ensuring alignment with financial reporting requirements (e.g: ICFR, SOX). Evaluate IT systems (e.g: ERPs, reporting and financial reporting systems) to identify risks affecting financial processes and recommend mitigation strategies. Develop risk control matrices (RCMs), risk registers, and audit-ready documentation for IT environments. Advise on IT governance, including BCP/DRP resilience, IT policies, and data integrity controls. Collaborate with finance teams to assess how applications, system configurations, and emerging technologies (e.g: AI, blockchain) impact financial outcomes. Mentor junior staff on IT audit methodologies, risk management tools, and compliance standards. Ensure adherence to Quality & Risk Management (Q&RM) protocols while fostering innovation in client deliverables. Skills for Success Technical Expertise : Understanding of ITGCs, ITACs, application security, and system dependencies in financial reporting. Risk Management : Proficiency in risk assessments, RCMs, control testing, and audit frameworks (e.g: COSO, COBIT). Analytical Mindset : Ability to analyse complex IT environments and articulate risks to both technical and non-technical stakeholders. Tools Proficiency : Advanced skills in Microsoft Office; familiarity with data analytics tools (Power BI, Tableu), ERP systems (SAP, Oracle), or GRC platforms is a plus. Leadership : Experience managing teams across multiple engagements with competing deadlines. Language : Fluent in English (Arabic preferred). Qualifications Bachelor s degree in Information Systems, IT, Computer Science, or related field. Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus). Experience in a Big 4 or consulting role, with hands-on experience in: IT audits, risk assessments, and controls testing (SOX/ICFR environments). Designing IT governance frameworks, BCP/DRP, and cybersecurity policies. Developing risk registers, RCMs, and process flow documentation. Ideally, you ll also have Proficiency in the Arabic language What we look for We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally. You will be business savvy with a passion for innovation as well as the motivation to create your own EY journey.

Desired Candidate Profile

Qualifications Bachelor s degree in Information Systems, IT, Computer Science, or related field. Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus). Experience in a Big 4 or consulting role, with hands-on experience in: IT audits, risk assessments, and controls testing (SOX/ICFR environments). Designing IT governance frameworks, BCP/DRP, and cybersecurity policies. Developing risk registers, RCMs, and process flow documentation. Ideally, you ll also have Proficiency in the Arabic language What we look for We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally. You will be business savvy with a passion for innovation as well as the motivation to create your own EY journey.