Assistant Manager - Cyber Assurance & IT Audit - Technology Risk

We're a large and growing professional services firm that still feels like a community. With over 76,000 professionals in more than 150 countries, we combine global scale with local expertise to help dynamic organizations unlock their potential for growth. As an Assistant Manager, you'll empower the team, deliver excellence, lead the way in shaping strategies and exceeding client expectations, and make a meaningful impact. Discover your purple and join our Business Risk Services Team today! As an Assistant Manager some of your responsibilities will include: - Leading and managing end-to-end IT audit and technology risk engagements for public sector, government-related entities, and large private sector clients across the UAE, ensuring delivery in line with Grant Thornton UAE methodologies, quality standards, and timelines - Overseeing the evaluation of IT General Controls (ITGCs), Lead & execute ERP application controls (Oracle, SAP, Microsoft Dynamics), cloud environments, and data protection requirements, including UAE data regulations, GDPR, and business continuity arrangements aligned to ISO 22301 and NCEMA - Planning, coordinating, and executing risk-based audit approaches, translating complex IT and business application landscapes into practical testing strategies supporting ICFR/SOX, internal audit, and regulatory assurance engagements - Managing engagement teams, including task allocation, coaching, on-the-job training, and review of workpapers and deliverables to ensure technical quality and consistency - Acting as a key participant in client and audit committee-facing discussions, presenting scope, observations, risk implications, and remediation actions; oversee the preparation of clear, defensible audit reports and monitor closure of agreed management actions - Leading third-party risk management (TPRM) reviews, including assessment of vendor contracts for governance, cybersecurity, data privacy, BCP/DR, audit rights, performance obligations, and regulatory alignment within the UAE context - Building and sustaining trusted client relationships, serving as a primary GT UAE point of contact for IT, Finance, Risk, and Internal Audit stakeholders - Providing pragmatic insights and guidance on technology and cyber risk trends impacting UAE organizations, including cloud adoption, ERP transformations, AI initiatives, and operational resilience - Contributing to business development and practice growth, including proposal preparation, commercial scoping, client presentations, and development of GT UAE thought leadership and internal methodologies - Collaborating with broader GT UAE service lines (Internal Audit, Cybersecurity, Enterprise Risk, Data & Analytics) to deliver integrated, value-driven assurance and advisory outcomes Requirements: - 7+ years of related work experience in Technology Risk, IT Audit, ICFR, SOX, or ERP assurance engagements - Bachelor's or Master's degree in Information Systems or Technology, Computer Science, Engineering, or a related discipline - Professional certifications such as CISA, CISM, CISSP, ISO 27001 (Any 2) - ERP platform certifications or hands-on experience in Oracle ERP / Oracle Fusion, SAP (Preferred) - Prior experience delivering ICFR / ITGC / SOX-style controls, technology risk, or assurance engagements within UAE or GCC organizations - Working knowledge of UAE and regional regulatory frameworks, such as: UAE Internal Audit Standards, IA 2025 Controls, ISO 27001, NESA, NCEMA, ADGM FSRA, DIFC, or sector-specific regulations - Strong stakeholder management skills, with experience interacting with senior management, internal audit, compliance, and IT leadership - Arabic language skills are an advantage - Ability to work in onsite client environments and meet UAE client delivery and security clearance requirements