Senior Consultant – Technology Risk

About the role

EY is expanding its Technology Risk practice across the MENA region and seeks a Senior Consultant to lead and deliver IT and cybersecurity engagements in Iraq. You will work with diverse clients, helping them design and implement risk‑based solutions where off‑the‑shelf products do not exist.

Key responsibilities

• Lead end‑to‑end technology risk engagements with minimal supervision.
• Develop proposals, presentations and business development materials for senior executives.
• Produce high‑quality final reports and ensure delivery excellence.
• Collaborate with financial auditors on ITGCs, ITACs and SOX compliance.
• Support business continuity and disaster recovery planning activities.

Required profile

• 3‑5+ years of experience in IT audit, cybersecurity or technology risk consulting.
• Proven track record of delivering technology risk projects, preferably in a Big 4 or comparable environment.
• Bachelor’s degree in IT, Cybersecurity, Computer Science or a related field.
• Relevant certifications such as CISA, CISSP, CISM or ISO 27001 Lead Auditor are a plus.

Required skills

• Knowledge of risk and governance frameworks: COBIT, ITIL, NIST, ISO 27001.
• Experience with IT systems audit and internal controls over financial reporting (ICFR, SOX).
• Familiarity with enterprise applications: SAP, Oracle, Microsoft Dynamics.
• Understanding of operating systems, databases, Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP).
• Fundamentals of cybersecurity, including common threats and vulnerabilities.