Senior Consultant - Internal Controls and Governance
EYUnited Arab Emirates - DubaiPosted 28 September 2026
LinkedInDirect employerTop-rated employerEnterpriseGreat culture
Location
United Arab Emirates - Dubai
Job type
Hybrid
Experience
5-8 years
Salary
AED 25k–38k/mo (est.)
Job description
In Financial Accounting Advisory Services (FAAS), we partner with clients to address complex accounting, governance, and risk management challenges. You will join a team that empowers finance functions through governance, risk mitigation, and controls optimization, leveraging technology to strengthen financial reporting integrity and corporate resilience. With EY's global resources and MENA expertise, you will drive innovation in finance and tech-enabled governance while building a career that shapes a better working world.
The Opportunity
EY's MENA practice is a leader in advising governments, private enterprises, and multinationals on Internal Controls over Financial Reporting (ICFR) and Governance that bridge finance and IT. Role Key focus areas include:
- IT Governance & Controls: Designing and assessing IT General Controls (ITGCs), IT Application Controls (ITACs), Business Continuity Planning (BCP), Disaster Recovery Planning (DRP), and technology frameworks / policies.
- Risk & Controls Transformation: Developing risk control matrices (RCMs), risk registers, and evaluating the impact of systems/processes on financial reporting.
- Technology-Driven Financial Reporting: Advising on ERP implementations, system migrations, and automation tools to enhance reporting accuracy.
- Regulatory & Compliance: Aligning IT policies with standards (e.g: COSO, COBIT, ISO 27001) and emerging regulations.
Your Key Responsibilities
- Lead engagements focused on IT risk assessments, controls design, and governance frameworks, ensuring alignment with financial reporting requirements (e.g: ICFR, SOX).
- Evaluate IT systems (e.g: ERPs, reporting and financial reporting systems) to identify risks affecting financial processes and recommend mitigation strategies.
- Develop risk control matrices (RCMs), risk registers, and audit-ready documentation for IT environments.
- Advise on IT governance, including BCP/DRP resilience, IT policies, and data integrity controls.
- Collaborate with finance teams to assess how applications, system configurations, and emerging technologies impact financial outcomes.
- Mentor junior staff on IT audit methodologies, risk management tools, and compliance standards.
- Ensure adherence to Quality & Risk Management protocols while fostering innovation in client deliverables.
Skills For Success
- Technical Expertise: Understanding of ITGCs, ITACs, application security, and system dependencies in financial reporting.
- Risk Management: Proficiency in risk assessments, RCMs, control testing, and audit frameworks (e.g: COSO, COBIT).
- Analytical Mindset: Ability to analyse complex IT environments and articulate risks.
- Tools Proficiency: Advanced skills in Microsoft Office; familiarity with data analytics tools (Power BI, Tableau), ERP systems (SAP, Oracle), or GRC platforms is a plus.
- Leadership: Experience managing teams across multiple engagements with competing deadlines.
- Language: Fluent in English (Arabic preferred).
Qualifications
- Bachelor's degree in Information Systems, IT, Computer Science, or related field.
- Professional certification: CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent (ACCA/CIA/CRMA is a plus).
- Experience in a Big 4 or consulting role, with hands-on experience in IT audits, risk assessments, and controls testing.
Skills
SAPOraclePower BITableauCOSOCOBITISO 27001CISACISSPCRISC
What Jobze.ai noticed
- EY wants deep expertise in IT general controls and application controls within ERP environments like SAP and Oracle.
- Expect to lead client engagements focused on SOX compliance, ICFR frameworks, and risk control matrices.
- Requires strong professional certifications such as CISA, CISSP, or CRISC alongside Big 4 or equivalent consulting experience.
This role was published by EY on LinkedIn. Jobze.ai is not the employer and does not take applications - they are handled on the original site.