technology risk consultant

<div>
 Requisition Id: 1662821
 
 
 As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it&rsquo;s your career and &lsquo;It&rsquo;s yours to build&rsquo; which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self.
 
 
 
 The opportunity
 
 : Associate Consultant-TMT-Business Consulting Risk-CNS - Risk - Digital Risk - Bangalore
 
 
 
 TMT :
 
 
 
 Industry convergence offers TMT (Technology, Media &amp; Entertainment, and Telecommunications) organizations the chance to evolve and transform, but it also presents challenges around competitiveness and delivering agile corporate strategies for growth. Content distributors are transforming into content producers, service providers are becoming tech companies, technology companies are the catalyst for dramatic change in every sector, and customers want the latest innovations now.
 
 
 We help TMT companies create compelling employee and customer experiences, retaining skills and talent while achieving enterprise-wide operational excellence. We help them protect their data, brand and reputation. We also enable the pursuit of M&amp;A strategies that systematically create value, reduce risk and transform TMT companies into powerhouses that will lead the technology revolution of the future &ndash; building a better working world for all.
 
 
 
 CNS - Risk - Digital Risk :
 
 
 
 EY Consulting is building a better working world by transforming businesses through the power of people, technology and innovation. Our client-centric approach focuses on driving long-term value for our clients by solving their most strategic problems. EY Consulting is made up of three sub-service lines: Business Consulting (including Performance Improvement and Risk Consulting), Technology Consulting and People Advisory Services.
 
 
 We help our clients in identifying and managing the interplay between upside and downside risk in order to make the long-term decisions to prevent risk and impact on their organization's ability to meet its future business strategy and objectives. The 3 key fields of play are :
 
 
 Enterprise Risk - helps clients identify and address key risk areas, while building the agility to respond quickly. The areas of focus include Enterprise risk and resilience, Internal audit, Compliance and Internal controls
 
 
 Technology Risk - helps clients to achieve sustainable growth by supporting their efforts to protect their business performance and by providing trusted communications on internal control and regulatory compliance to investors, management, regulators, customers and other stakeholders. EY teams accomplish this by assessing the technology risks that are introduced to businesses.
 
 
 Financial Services Risk - helps clients in the financial sector to identify, manage and monitor the risks in their business. It is done through a transformative and agile approach including process and procedures, risk, data modeling and analytics, reporting to stakeholders and third parties, business requirements (for software selection and IT implementation), analysis of assets and liabilities, and capital and liquidity management.
 
 
 
 Your Key Responsibilities
 
 
 
 
 Technical Excellence
 
 
 
 <ul>
 <li>
 Demonstrated ability to assess and mitigate digital risks. Experience in conducting risk assessments and developing risk management strategies for clients. Proficient in analyzing regulatory compliance and cybersecurity measures related to digital transformation. Strong understanding of risk frameworks and methodologies applicable to consulting projects. Ability to deliver insights and recommendations by synthesizing complex data and consulting concepts effectively.
 
 
 </li>
 </ul>
 
 Skills And Attributes
 
 
 
 
 To qualify for the role you must have
 
 
 
 
 Qualification
 
 
 
 <ul>
 <li>
 Bachelor of Technology in Computer Science
 </li>
 <li>
 Bachelor of Business Administration
 </li>
 <li>
 Bachelor of Computer Applications
 </li>
 <li>
 Master of Business Administration
 </li>
 <li>
 Master of Computer Applications
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 Information Security (1-2 Years)
 
 
 </li>
 </ul>
 
 What We Look For
 
 
 
 People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.
 
 
 
 What We Offer
 
 
 
 Fuelled by the brilliance of our people, EY has emerged as the strongest brand and the most attractive employer in our field, with market-leading growth over competitors. Our people work side-by-side with market-leading entrepreneurs, game-changers, disruptors, and visionaries. As an organization, we are investing more time, technology, and money than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills, and opportunities.
 
 
 EY is equally committed to being an inclusive employer, and we strive to achieve the right balance for our people&mdash;enabling us to deliver excellent client service while allowing our people to build their careers as well as focus on their wellbeing.
 
 
 If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
 
 
 Join us in shaping the future with confidence. Apply Now
</div>

Associate Consultant - Business Consulting Risk - TMT - CNS - Risk - Digital Risk - Bangalore

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 
 
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
 
 
 Join EY and help to build a better working world.
 
 
 
 The opportunity
 
 
 
 To support the significant growth of our Technology Risk service in MENA, EY is looking to hire highly qualified resources. Specifically, as part of this job posting, we are looking for a Senior Consultant / Assistant Manager. Working across many different industries, this role will be responsible for executing and leading IT and cybersecurity projects. It is all about listening to our clients, asking the better questions, and supporting them in areas where there are no off-the-shelf solutions.
 
 
 
 Your Key Responsibilities
 
 
 
 A large part of the role will be engagement delivery and EY will expect the candidates to lead and deliver engagements with very minimal supervision. EY also expects the candidates to support executives in development of proposals, presentations and other business development activities. The candidate will be responsible for the delivery and quality of the final reports to EY's clients.
 
 
 An existing track record of successful engagement delivery in Technology Risk is expected of all candidates for this role. A Big 4 background or comparable consulting experience is highly advantageous. A broad background across IT and Cybersecurity is expected with specific experience in the following areas:
 
 
 <ul>
 <li>
 Expertise in Risk and Governance Frameworks, including IT governance frameworks (e.g., COBIT, ITIL, NIST), ISO 27001 standards, information security principles, policy development, and risk assessment.
 </li>
 <li>
 Proficiency in IT Systems Audit, encompassing planning, execution, audit methodologies, complex IT environment evaluation, control weakness identification, and effective communication of findings.
 </li>
 <li>
 Comprehensive knowledge of internal controls over financial reporting (ICFR), covering ITGCs, ITACs, SOX requirements, supporting financial audits with IT expertise, and strong liaison skills with financial auditors.
 </li>
 <li>
 Good understanding around the application systems such as SAP, Oracle, Microsoft Dynamics and operating systems and databases.
 </li>
 <li>
 Strong understanding of Business Continuity Planning (BCP), including BCP/DRP principles, business impact analyses, recovery strategy development, and plan testing.
 </li>
 <li>
 Strong understanding of cybersecurity fundamentals, including common threats, vulnerabilities, basic principles, and contributions to cybersecurity discussions.
 </li>
 <li>
 General Skills: Excellent analytical, problem-solving, communication, presentation, project management, organizational, leadership, client service, and business development skills.
 
 
 </li>
 </ul>
 
 Skills And Attributes For Success
 
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or in a related field.
 </li>
 <li>
 Relevant professional certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Auditor) are preferred.
 </li>
 <li>
 Minimum of 3 to 5 years of experience in IT audit, information security, or related fields.
 </li>
 <li>
 Strong knowledge of ITGC/ITAC, information security frameworks, and cybersecurity best practices.
 </li>
 <li>
 Excellent analytical, problem-solving, and communication skills.
 </li>
 <li>
 Ability to work independently and collaboratively within a team environment.
 
 
 </li>
 </ul>
 
 What We Offer You
 
 
 
 At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 
 
 Are you ready to shape your future with confidence? Apply today.
 
 
 To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
 
 
 
 EY
 
 | Building a better working world
 
 
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 
 
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 
 
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
</div>

Senior / AM, Technology Risk, Cairo

<div>Line of Service
Internal Firm Services
Industry/Sector
Specialism
Management Level
Senior Associate
Job Description &amp; Summary
<div><div>About the Role
</div><div>Our Technology Risk and Resilience team helps firms navigate a fast-moving regulatory landscape while managing robust, future-proof technology estates. From shaping digital resilience frameworks under the Digital Operational Resilience Act (DORA) to helping firms enhance their technology risk maturity, we combine deep sector insight with leading technology to solve problems alongside our clients. 
</div><div>What You&rsquo;ll Be Doing
</div><div><ul><li>Supporting the engagement manager and broader team in delivering technology risk and resilience advisory engagements.
</li></ul></div></div><div><div><ul><li>Performing control walkthroughs, sample testing, and evidence review across technology risk and resilience domains.
</li></ul></div><div><ul><li>Drafting gap analysis and maturity assessment artefacts aligned to frameworks such as COBIT, ITIL, NIST CSF, ISO 27001/22301.
</li></ul></div><div><ul><li>Assisting with regulatory readiness and assurance projects, including resilience assessments under DORA and other EU/UK regulations.
</li></ul></div><div><ul><li>Preparing working papers and contributing to reports for clients, regulators, and internal stakeholders.
</li></ul></div><div><ul><li>Supporting risk advisory and assurance engagements, ensuring resilience objectives are embedded in technology change and operations.
</li></ul></div><div><ul><li>Using platforms like ServiceNow for resilience-related analysis and reporting.
</li></ul></div><div><ul><li>Engaging with the firm&rsquo;s digital agenda, leveraging AI tools to enhance risk monitoring and resilience testing.
</li></ul></div><div><ul><li>Contributing to cloud and DevOps risk assessments, ensuring secure, compliant, and recoverable environments.
</li></ul></div><div><ul><li>Assisting with business development activities such as preparing responses to tenders and creating proposal documents.
</li></ul></div><div><ul><li>Building trusted relationships with client SMEs and control owners.
</li></ul></div><div><ul><li>Coaching junior team members and supporting their development.
</li></ul></div><div><ul><li>Taking ownership of your personal development to ensure you are equipped with skills relevant to the proposition now and in the future. 
</li></ul></div><div>What We&rsquo;re Looking For
</div><div><ul><li>Experience in technology risk, IT audit, digital resilience, or related consulting.
</li></ul></div><div><ul><li>Working knowledge of UK/EU Technology and Resilience Regulations (including DORA) and frameworks such as COBIT, ITIL, NIST CSF, ISO 27001/22301.
</li></ul></div><div><ul><li>Practical experience in control testing or assurance fieldwork (evidence sampling, walkthroughs, KRI analysis).
</li></ul></div><div><ul><li>Strong communication skills - able to translate technical findings into clear, concise messages for business stakeholders.
</li></ul></div><div><ul><li>Familiarity with ServiceNow for resilience-related analysis and automation.
</li></ul></div><div><ul><li>Understanding of technology risk models and resilience frameworks.
</li></ul></div></div><div><div><ul><li>Demonstrable experience of using AI in current role for risk and resilience use cases.
</li></ul></div><div><ul><li>Progress toward professional certifications such as CRISC, CISA, CISSP, CBCI, ISO 22301 Lead Auditor, or Prince2/ AgilePM .
</li></ul></div><div><ul><li>Exposure to regulatory remediation programmes (e.g., s166 Skilled-Person reviews) preferred.
</li></ul></div></div>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Amazon Web Services (AWS), Analytical Thinking, Apptio, Cloud Administration, Cloud-Based Service Management, Cloud Compliance, Cloud Engineering, Cloud Infrastructure, Cloud Infrastructure Architecture Design, Cloud Infrastructure Optimization, Cloud Migration, Cloud Operations (CloudOps), Cloud Performance Optimization, Cloud Service Delivery, Cloud Strategy, Communication, Creativity, CrowdStrike, Dynatrace APM, Embracing Change, Emotional Regulation, Empathy {+ 18 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, Technology and Resilience - Senior Associate

Baker Tilly

<div><h1 class="jobSectionHeader">Overview</h1>
BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory&rsquo;s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. 
 
Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. 
To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency (&quot;search firm&quot;) for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.<h1 class="jobSectionHeader">
Job Description:</h1> 
Responsibilities:<ul><li>
Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed. Develop in-depth knowledge of clients&rsquo; businesses and industries by having direct client interaction while working on multiple aspects of an engagement.</li><li>
Think independently and strategically about your clients&rsquo; business, systems, and risks, providing recommendations for business and process improvements based on knowledge gained relative to the client&rsquo;s operations, processes, and business objectives.</li><li>
Provide strategic business advice to clients by assisting in the implementation of new processes and controls that address key risks.</li><li>
Assess, manage, and optimize information technology risk across areas such as cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.</li><li>
Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients.</li><li>
Assist in the development of audit programs and the execution of internal audits and IT control assessments across IT strategy, governance, operations, cybersecurity, third-party risk, ITGC, SOC reporting, and regulatory compliance.</li><li>
Draft comprehensive executive summaries and final reports for delivery to clients, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies.</li><li>
Act as a valued business advisor, building relationships and communicating effectively with clients to provide superior service.</li><li>
Demonstrate continuous growth by expanding knowledge and experience in technology environments, platforms, and tools, while pursuing education and networking opportunities to maximize personal and professional development.</li></ul>
Qualifications:<ul><li>
Bachelor&rsquo;s degree required. - CISA, CISSP, CISM, CIA, or CPA certification(s) preferred.</li><li>
Minimum 1 year experience with IT audit or cybersecurity, previous experienced performing SOX and SOC audits preferred</li><li>
Experience as a client serving professional for a consulting firm desired</li><li>
Excellent analytical, technical and problem-solving skills, with strong attention to detail</li><li>
Exceptional verbal and written communication, collaboration, and time management skills</li><li>
Ability to travel for work and work on Additional Projects wherever needed.</li></ul></div>

Cyber Security Consultant

Protiviti Middle East Member Firm

<div>
 
 
 
 Consultant / Senior Consultant &ndash; Internal Audit (Manufacturing Industry)
 
 
 
 
 
 
 
 
 Position Summary:
 
 
 
 The Consultant / Senior Consultant will be responsible for delivering internal audit, risk advisory, and governance-related engagements across diverse industries. The role requires strong analytical capabilities, understanding of business processes, risk management principles, and the ability to support clients in strengthening their internal control environment. Senior Consultants will additionally supervise junior team members, lead workstreams, and manage day-to-day client interactions.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 1. Internal Audit
 
 
 <ul>
 <li>
 Perform end-to-end internal audit engagements, including planning, process walkthroughs, risk and control assessment, testing, reporting, and follow-up.
 </li>
 <li>
 Document business processes using flowcharts, narratives, and risk control matrices.
 </li>
 <li>
 Identify control deficiencies, develop practical recommendations, and draft high-quality audit reports.
 </li>
 <li>
 Execute testing of design and operating effectiveness of controls, including ICOFR / SOX-type reviews (where applicable).
 </li>
 <li>
 Apply Protiviti methodology, professional standards (IIA / IPPF / GIAS), and regulatory requirements (e.g., CMA, SAMA where applicable).
 </li>
 </ul>
 
 
 2. Risk Management &amp; Advisory
 
 
 <ul>
 <li>
 Support development of risk registers, enterprise risk frameworks, risk appetite statements, and risk assessment criteria.
 </li>
 <li>
 Conduct risk workshops, stakeholder interviews, and root cause analysis.
 </li>
 <li>
 Assist clients in designing internal control frameworks, governance structures, and policy enhancements.
 </li>
 <li>
 Support maturity assessments, gap analysis, and benchmarking against industry best practices (COSO ERM, ISO 31000, ISO 37301, etc.).
 </li>
 </ul>
 
 
 3. Compliance, Governance, and Controls Advisory
 
 
 <ul>
 <li>
 Assist in developing compliance frameworks, compliance risk assessments, and monitoring plans.
 </li>
 <li>
 Conduct regulatory reviews and identify gaps against local/cross-border regulations (CMA, SAMA regulators, etc.)
 </li>
 <li>
 Evaluate entity-level controls, segregation of duties (SoD), and ITGCs with support from technology teams.
 </li>
 </ul>
 
 
 4. Client Management &amp; Stakeholder Interaction
 
 
 <ul>
 <li>
 Engage with client process owners during interviews, walkthroughs, and presentation of findings.
 </li>
 <li>
 Maintain strong relationships with client stakeholders to ensure project success and service excellence.
 </li>
 <li>
 Senior Consultants: Lead client discussions, handle challenging conversations, and provide value-added insights.
 </li>
 </ul>
 
 
 5. Project Management &amp; Quality Assurance
 
 
 <ul>
 <li>
 Prepare audit plans, testing matrices, working papers, and deliverables aligned with Protiviti quality standards.
 </li>
 <li>
 Track engagement budgets, timelines, and risks to ensure timely delivery.
 </li>
 <li>
 Senior Consultants: Supervise junior staff, review working papers, and ensure adherence to methodologies.
 </li>
 </ul>
 
 
 6. Data Analytics &amp; Digital Enablement
 
 
 <ul>
 <li>
 Use data analytics tools (ACL, Power BI, Alteryx, or equivalent) to enhance project efficiency.
 </li>
 <li>
 Apply digital internal audit techniques, continuous controls monitoring, and automation tools (preferred for Senior Consultant level).
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Qualifications &amp; Experience
 
 
 
 
 Education
 
 
 <ul>
 <li>
 CIA, CPA, ACCA, CMA, CISA, CRMA, or equivalent.
 </li>
 <li>
 Bachelor&rsquo;s degree in Accounting, Finance, Business, or related field.
 </li>
 </ul>
 
 
 
 
 
 Experience
 
 
 <ul>
 <li>
 
 Consultant:
 
 3&ndash;4 years of experience in internal audit, risk advisory, or relevant consulting.
 </li>
 <li>
 
 Senior Consultant:
 
 4&ndash;5 years of relevant experience, preferably in a Big 4 or professional services environment.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Competencies
 
 
 <ul>
 <li>
 Strong understanding of internal audit methodology and risk management principles within Manufacturing industry.
 </li>
 <li>
 Ability to analyze processes, identify risks, and evaluate controls.
 </li>
 <li>
 Work independently as well as in a team-oriented environment.
 </li>
 <li>
 Excellent interpersonal, project management and client relationship skills
 </li>
 <li>
 Excellent report writing and presentation skills.
 </li>
 <li>
 Strong project management and organizational skills.
 </li>
 <li>
 Proficiency in MS Office; familiarity with audit management systems (Team Mate, Audit Board, etc.) is a plus.
 </li>
 <li>
 Analytical mindset with ability to work under pressure and manage multiple deadlines.
 </li>
 <li>
 Strong interpersonal skills and ability to work collaboratively in teams.
 </li>
 <li>
 Senior Consultants: Leadership skills and experience guiding junior team members.
 </li>
 <li>
 Senior Consultants: Experience in mentoring and people developmental skills.
 </li>
 <li>
 </li>
 <li>
 </li>
 </ul>
 
 
 Work Environment
 
 
 <ul>
 <li>
 Client-facing role with travel requirements depending on engagements.
 </li>
 <li>
 Fast-paced environment requiring adaptability, professional judgment, and commitment to quality.
 </li>
 </ul>
 
 
 
 
 
 Location:
 
 
 
 Selected personnel would be based out of the Dammam, KSA office.
 
</div>

Consultant / Senior Consultant – Internal Audit (Manufacturing Industry)

DXC Technology

<div>
 
 Job Description
 
 
 
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 The SAP GRC Consultant is responsible for designing, implementing, and supporting SAP Governance, Risk, and Compliance (GRC) solutions to strengthen internal controls, risk management, user access governance, and compliance reporting. The consultant will work closely with security, audit, and business stakeholders to ensure regulatory adherence (SOX, IFRS, ISO, local compliance) and alignment with enterprise risk management frameworks.
 
 
 
 Key Process &amp; Technical Knowledge
 
 
 
 
 The Consultant Should Have Strong Expertise In
 
 
 
 
 SAP GRC Access Control (AC):
 
 
 
 <ul>
 <li>
 User Access Management (UAR).
 </li>
 <li>
 Emergency Access Management (EAM / Firefighter).
 </li>
 <li>
 Access Risk Analysis (ARA).
 </li>
 <li>
 Business Role Management (BRM).
 
 
 </li>
 </ul>
 
 SAP GRC Process Control (PC)
 
 
 
 <ul>
 <li>
 Control design, documentation, monitoring, and testing.
 </li>
 <li>
 Continuous Control Monitoring (CCM).
 </li>
 <li>
 Policy management &amp; workflow.
 
 
 </li>
 </ul>
 
 SAP GRC Risk Management (RM)
 
 
 
 <ul>
 <li>
 Enterprise Risk Management framework configuration.
 </li>
 <li>
 Risk assessment methodologies.
 </li>
 <li>
 Key Risk Indicators (KRIs).
 
 
 </li>
 </ul>
 
 SAP Audit Management (AM)
 
 
 
 <ul>
 <li>
 Planning and execution of audit engagements.
 </li>
 <li>
 Integration with risk and process control.
 </li>
 <li>
 Audit reporting and follow-up tracking.
 
 
 </li>
 </ul>
 
 Integration Skills
 
 
 
 <ul>
 <li>
 SAP GRC with SAP S/4HANA security concepts.
 </li>
 <li>
 Interfaces with Identity Management (IDM) and LDAP/AD.
 </li>
 <li>
 Understanding of SoD (Segregation of Duties) frameworks.
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams.
 </li>
 <li>
 Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules.
 </li>
 <li>
 Perform SoD analysis, remediation, and mitigating control design.
 </li>
 <li>
 Implement workflow automation for user provisioning and access approvals.
 </li>
 <li>
 Support business role design and access governance.
 </li>
 <li>
 Enable continuous monitoring of controls and risks in SAP and non-SAP environments.
 </li>
 <li>
 Provide expertise during internal and external audits.
 </li>
 <li>
 Deliver end-user and key-user training on SAP GRC functionalities.
 </li>
 <li>
 Work closely with Basis and Security teams to ensure compliance with corporate IT policies.
 </li>
 <li>
 Support cutover, hypercare, and ongoing compliance operations.
 
 
 </li>
 </ul>
 
 Required Qualifications &amp; Skills
 
 
 
 
 Education &amp; Certifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Systems, Computer Science, Finance, or related field.
 </li>
 <li>
 SAP GRC Certification (preferred).
 </li>
 <li>
 CISA, CISM, CRISC, or similar audit/security certifications (advantage).
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 5&ndash;8 years in SAP Security &amp; Compliance, with minimum 3 years in SAP GRC.
 </li>
 <li>
 Hands-on implementation/support in Access Control + at least one of PC/RM/AM.
 </li>
 <li>
 Experience with SoD rule set customization and remediation.
 </li>
 <li>
 Exposure to compliance frameworks like SOX, GDPR, ISO 27001, NCA/NCA ECC.
 
 
 </li>
 </ul>
 
 Technical Skills
 
 
 
 <ul>
 <li>
 Strong knowledge of SAP authorization concepts (roles, profiles, SUIM, SU24, PFCG).
 </li>
 <li>
 Expertise in GRC workflow, BRF+, MSMP configuration.
 </li>
 <li>
 Understanding of connector setup between GRC and SAP systems.
 </li>
 <li>
 Familiarity with audit and risk management best practices.
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication for engaging business, audit, and IT teams.
 </li>
 <li>
 Ability to work under compliance pressure and deadlines.
 
 
 </li>
 </ul>
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 
 Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available
 
 here
 
 
 .
 
 
</div>

SAP GRC / Audit / Risk Management

Toll International LLC

<div>
 
 
 Position Title:&nbsp;
 
 
 Project Risk Manager
 
 &nbsp;
 
 
 
 
 
 
 Work Schedule:&nbsp;
 
 Hybrid (on-site and remote as required by project needs)&nbsp;
 
 
 
 
 
 
 Location:&nbsp;
 
 New York City, NY&nbsp;&nbsp;
 
 
 
 
 
 
 Company Overview
 
 &nbsp;
 
 
 
 
 
 Toll International is a premier consulting firm based in New York City,&nbsp;specialized&nbsp;in comprehensive construction project management and technology-enabled solutions. Renowned for our dedication to delivering high-quality, cost-effective, and innovative results tailored to the unique needs of our clients, we lead infrastructure and digital transformation projects across New York State and beyond.&nbsp;
 
 
 
 
 
 We are proud to partner with the Port Authority of New York &amp; New Jersey (PANYNJ) on high-impact infrastructure and technology initiatives. We are currently seeking talented professionals to collaborate with subject matter experts, project managers, and process owners to deliver critical projects.&nbsp;
 
 
 
 
 
 
 Position Overview
 
 &nbsp;
 
 
 
 
 
 Toll International is seeking an experienced&nbsp;
 
 Project Risk Management Consultant
 
 &nbsp;to support the Port Authority of New York &amp; New Jersey on active capital and non-capital infrastructure projects. This role&nbsp;is responsible for&nbsp;leading end-to-end project risk management efforts, including risk identification, quantitative analysis, modeling, mitigation planning, and reporting.&nbsp;
 
 
 
 
 
 The consultant will work closely with Port Authority stakeholders, project teams, and subject matter experts to ensure project risks related to cost, schedule, and scope are properly&nbsp;identified, analyzed, and mitigated. This position plays a critical role in supporting project authorization decisions and strengthening enterprise risk management practices across complex infrastructure programs.&nbsp;
 
 
 
 
 
 &nbsp;
 
 
 
 
 
 
 Key Responsibilities
 
 &nbsp;
 
 
 
 
 <ul>
 <li>
 Lead and manage comprehensive project risk assessments for capital and non-capital projects&nbsp;
 </li>
 <li>
 Plan, organize, and&nbsp;facilitate&nbsp;project risk assessment and risk mitigation workshops&nbsp;
 </li>
 <li>
 Identify, document, score, and analyze project risks using Authority-provided templates and standards&nbsp;
 </li>
 <li>
 Perform quantitative cost and schedule risk analysis using Monte Carlo simulation techniques&nbsp;
 </li>
 <li>
 Develop and&nbsp;maintain&nbsp;project risk registers and risk assessment models&nbsp;
 </li>
 <li>
 Review and&nbsp;validate&nbsp;engineering documentation, construction cost estimates, and project schedules&nbsp;
 </li>
 <li>
 Develop Primavera P6 schedules when&nbsp;required&nbsp;to support schedule risk modeling&nbsp;
 </li>
 <li>
 Prepare draft and final Project Risk Assessment Reports and Lessons Learned Reports&nbsp;
 </li>
 <li>
 Present risk analysis findings and recommendations to stakeholders and leadership&nbsp;
 </li>
 <li>
 Support continuous improvement of the Authority&rsquo;s risk management processes&nbsp;
 </li>
 <li>
 Provide risk management training, mentoring, and briefings as&nbsp;required&nbsp;
 </li>
 </ul>
 
 &nbsp;
 
 
 
 
 
 
 Required Qualifications
 
 &nbsp;
 
 
 
 
 <ul>
 <li>
 Bachelor of Science degree in engineering, accounting, economics, or business administration&nbsp;
 
 OR
 
 &nbsp;a Project Management Professional (PMP) certification with a technical degree&nbsp;
 </li>
 <li>
 Minimum&nbsp;
 
 three (3) years of direct experience
 
 &nbsp;performing project risk assessments on capital or infrastructure projects&nbsp;
 </li>
 <li>
 Proven experience conducting risk assessment workshops and preparing formal risk assessment reports&nbsp;
 </li>
 <li>
 Strong, in-depth knowledge of project risk management and project management principles&nbsp;
 </li>
 <li>
 Hands-on experience with&nbsp;
 
 risk modeling and analysis tools
 
 , including:&nbsp;
 </li>
 <li>
 Lumivero&nbsp;/ Palisade&nbsp;
 
 @Risk
 
 &nbsp;(Excel add-in)&nbsp;
 </li>
 <li>
 
 Oracle Primavera Risk Analysis
 
 &nbsp;
 </li>
 <li>
 Demonstrated experience using&nbsp;
 
 Oracle Primavera P6 (Version 21)
 
 &nbsp;for schedule development and analysis&nbsp;
 </li>
 <li>
 Proficiency&nbsp;in Microsoft Office Suite, particularly Excel for quantitative analysis&nbsp;
 </li>
 <li>
 Excellent communication, facilitation, and stakeholder engagement skills&nbsp;
 </li>
 <li>
 Proven ability to manage multiple projects simultaneously and work independently&nbsp;
 </li>
 <li>
 Ability to obtain a&nbsp;
 
 SWAC ID and&nbsp;required&nbsp;security clearances&nbsp;immediately&nbsp;upon hire
 
 &nbsp;
 </li>
 <li>
 Availability for&nbsp;
 
 immediate assignment
 
 &nbsp;
 </li>
 </ul>
 
 &nbsp;
 
 
 
 
 
 
 Preferred Qualifications
 
 &nbsp;
 
 
 
 
 <ul>
 <li>
 
 PMI Risk Management Professional (PMI-RMP)
 
 &nbsp;certification&nbsp;
 </li>
 <li>
 Prior experience working with public-sector agencies or large infrastructure owners&nbsp;
 </li>
 <li>
 Experience supporting transportation, aviation, or large-scale infrastructure programs&nbsp;
 </li>
 </ul>
 
 &nbsp;
 
 
 
 
 
 
 What We Offer
 
 &nbsp;
 
 
 
 
 <ul>
 <li>
 Competitive salary with an extensive benefits package&nbsp;
 </li>
 <li>
 Engagement in high-profile, long-term projects&nbsp;
 </li>
 <li>
 A dynamic and supportive work environment&nbsp;
 </li>
 <li>
 Opportunities for professional growth and advancement&nbsp;
 </li>
 </ul>
 
 &nbsp;
 
 
 
 
 
 
 Ready to Apply?
 
 &nbsp;
 
 
 
 
 
 Qualified candidates should&nbsp;submit&nbsp;a resume highlighting experience. Indicate the role(s) of interest. Complete the employment application on our website:&nbsp;
 
 Toll International Careers Page
 
 &nbsp;at&nbsp;https://www.tollintl.com/careers&nbsp;&ndash;&nbsp;
 
 Include your resume
 
 .&nbsp;
 
 
 
 
 
 
 Note:
 
 &nbsp;Candidates who&nbsp;don&rsquo;t&nbsp;complete the employment application will not be considered.&nbsp;
 
</div>

Project Risk Management Consultant

Search 10000+ Technology risk consultant jobs near you this January. New roles added regularly across leading industries. Apply today.