Manager - Teck Risk - Rapid Karachi

EY is seeking a highly skilled Senior Consultant / Assistant Manager to join its growing Technology Risk service in the MENA region. This role involves leading and executing IT and cybersecurity projects across various industries. The successful candidate will work closely with clients to understand their unique challenges, ask insightful questions, and deliver tailored solutions where standard approaches do not apply. This position offers the opportunity to contribute to a globally connected, diverse team and to advance your career in a dynamic consulting environment.

Key Responsibilities
The primary focus of this role is engagement delivery, with an expectation to lead projects independently and ensure high-quality outcomes. Candidates will also support senior executives in preparing proposals, presentations, and other business development initiatives. Delivering comprehensive and accurate final reports to clients is a critical responsibility. A proven track record of successful Technology Risk engagements is essential. Candidates should demonstrate expertise in the following areas:

- Risk and Governance Frameworks, including IT governance frameworks such as COBIT, ITIL, and NIST, ISO 27001 standards, information security principles, policy development, and risk assessments.
- IT Systems Audit, covering audit planning, execution, methodologies, evaluation of complex IT environments, identification of control weaknesses, and clear communication of findings.
- Internal Controls over Financial Reporting (ICFR), including IT General Controls (ITGCs), IT Application Controls (ITACs), SOX compliance, and collaboration with financial auditors.
- Familiarity with enterprise application systems such as SAP, Oracle, Microsoft Dynamics, as well as operating systems and databases.
- Business Continuity Planning (BCP), including principles of BCP/Disaster Recovery Planning (DRP), business impact analysis, recovery strategy development, and plan testing.
- Cybersecurity fundamentals, including knowledge of common threats, vulnerabilities, and participation in cybersecurity discussions.
- Strong analytical, problem-solving, communication, presentation, project management, leadership, client service, and business development skills.

Required Qualifications
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
- Minimum of 3 to 5 years of experience in IT audit, information security, or related disciplines.
- Solid understanding of ITGC/ITAC, information security frameworks, and cybersecurity best practices.
- Excellent analytical, problem-solving, and communication abilities.
- Ability to work both independently and collaboratively within a team environment.

Preferred Qualifications and Benefits
- Professional certifications such as CISA, CISSP, CISM, or ISO 27001 Lead Auditor are highly desirable.
- Experience with a Big 4 firm or comparable consulting background is advantageous.

EY offers a future-focused development environment where you will gain world-class experience and be empowered to grow your talents within a flexible, diverse, and inclusive culture. The organization fosters globally connected teams and supports continuous learning to help you shape your future with confidence.

EY is committed to creating an equitable and inclusive recruitment process. Candidates are encouraged to communicate any disability-related accommodations needed during the hiring process.

Join EY and contribute to building a better working world by delivering innovative solutions that create value for clients, society, and the planet. EY leverages data, AI, and advanced technologies to address today’s most pressing challenges, operating across assurance, consulting, tax, strategy, and transactions in more than 150 countries worldwide.