Senior Consultant - Internal Controls and Governance

In Financial Accounting Advisory Services (FAAS), we partner with clients to address complex accounting, governance, and risk management challenges. You will join a team that empowers finance functions through governance, risk mitigation, and controls optimization, leveraging technology to strengthen financial reporting integrity and corporate resilience. With EY’s global resources and MENA expertise, you will drive innovation in finance and tech-enabled governance while building a career that shapes a better working world.

That is how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities.

Sound interesting? Well this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

The Opportunity

EY’s MENA practice is a leader in advising governments, private enterprises, and multinationals on Internal Controls over Financial Reporting (ICFR) and Governance that bridge finance and IT. Role Key focus areas include:

• IT Governance & Controls: Designing and assessing IT General Controls (ITGCs), IT Application Controls (ITACs), Business Continuity Planning (BCP), Disaster Recovery Planning (DRP), and technology frameworks / policies.
• Risk & Controls Transformation: Developing risk control matrices (RCMs), risk registers, and evaluating the impact of systems/processes on financial reporting.
• Technology-Driven Financial Reporting: Advising on ERP implementations, system migrations, and automation tools (e.g: processes automation) to enhance reporting accuracy.
• Regulatory & Compliance: Aligning IT policies with standards (e.g: COSO, COBIT, ISO 27001) and emerging regulations.

We seek technology-first professionals who excel at translating IT risks into actionable business insights while driving governance excellence.

Your Key Responsibilities

• Lead engagements focused on IT risk assessments, controls design, and governance frameworks, ensuring alignment with financial reporting requirements (e.g: ICFR, SOX).
• Evaluate IT systems (e.g: ERPs, reporting and financial reporting systems) to identify risks affecting financial processes and recommend mitigation strategies.
• Develop risk control matrices (RCMs), risk registers, and audit-ready documentation for IT environments.
• Advise on IT governance, including BCP/DRP resilience, IT policies, and data integrity controls.
• Collaborate with finance teams to assess how applications, system configurations, and emerging technologies (e.g: AI, blockchain) impact financial outcomes.
• Mentor junior staff on IT audit methodologies, risk management tools, and compliance standards.
• Ensure adherence to Quality & Risk Management (Q&RM) protocols while fostering innovation in client deliverables.

Skills for Success

• Technical Expertise: Understanding of ITGCs, ITACs, application security, and system dependencies in financial reporting.
• Risk Management: Proficiency in risk assessments, RCMs, control testing, and audit frameworks (e.g: COSO, COBIT).
• Analytical Mindset: Ability to analyse complex IT environments and articulate risks to both technical and non-technical stakeholders.
• Tools Proficiency: Advanced skills in Microsoft Office; familiarity with data analytics tools (Power BI, Tableu), ERP systems (SAP, Oracle), or GRC platforms is a plus.
• Leadership: Experience managing teams across multiple engagements with competing deadlines.
• Language: Fluent in English (Arabic preferred).

Qualifications

• Bachelor’s degree in Information Systems, IT, Computer Science, or related field.
• Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus).
• Experience in a Big 4 or consulting role, with hands-on experience in:
• IT audits, risk assessments, and controls testing (SOX/ICFR environments).
• Designing IT governance frameworks, BCP/DRP, and cybersecurity policies.
• Developing risk registers, RCMs, and process flow documentation.

Ideally, you’ll also have

• Proficiency in the Arabic language

What we look for

We are interested in entrepreneurs who have the confidence to develop and promote a brand-new strategic vision both internally and externally. You will be business savvy with a passion for innovation as well as the motivation to create your own EY journey.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on performance and recognized for the value you bring to our business. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.