Senior Consultant – Tech Risk (Beirut)

About the role

EY is expanding its Technology Risk service in the MENA region and is looking for a Senior Consultant to lead and deliver IT and cybersecurity engagements for a variety of clients. You will work closely with senior executives, help shape proposals, and ensure high‑quality delivery of risk assessments and audit reports.

Key responsibilities

• Lead end‑to‑end technology risk engagements with minimal supervision.
• Develop and present proposals, presentations and business development materials.
• Perform IT governance, risk and compliance assessments using frameworks such as COBIT, ITIL and NIST.
• Conduct IT systems audits, identify control weaknesses and communicate findings to clients.
• Support internal controls over financial reporting (ICFR), including ITGC, ITAC and SOX testing.
• Evaluate enterprise applications (SAP, Oracle, Microsoft Dynamics) and underlying operating systems and databases.
• Assist clients with Business Continuity Planning and Disaster Recovery strategies.
• Contribute to cybersecurity discussions and provide guidance on threats and vulnerabilities.

Required profile

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science or a related field.
• 3–5 years of experience in IT audit, information security or technology risk.
• Previous experience in a Big 4 or comparable consulting environment is highly advantageous.
• Professional certifications such as CISA, CISSP, CISM or ISO 27001 Lead Auditor are preferred.

Required skills

• COBIT, ITIL, NIST frameworks
• ISO 27001 standards
• IT systems audit methodology
• ICFR, ITGC, ITAC, SOX compliance
• Enterprise applications: SAP, Oracle, Microsoft Dynamics
• Operating systems and databases
• Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP)
• Fundamentals of cybersecurity, threat analysis and vulnerability assessment