Senior Consultant / Assistant Manager – Technology Risk (Pakistan)

About the role

EY is seeking a Senior Consultant / Assistant Manager to join its Technology Risk practice in Pakistan. The role will lead and deliver IT and cybersecurity engagements across multiple industries, helping clients address complex risk challenges where off‑the‑shelf solutions do not exist.

Key responsibilities

• Lead end‑to‑end delivery of technology risk and cybersecurity projects with minimal supervision.
• Develop proposals, presentations and business development materials for senior executives.
• Produce high‑quality final reports and ensure client satisfaction.
• Perform IT systems audits, assess internal controls, and support financial audits (ICFR, SOX).
• Advise on risk and governance frameworks such as COBIT, ITIL, NIST and ISO 27001.

Required profile

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science or related field.
• 3–5 years of experience in IT audit, technology risk or cybersecurity consulting.
• Prior experience in a Big 4 or comparable consulting environment is advantageous.

Required skills

• Knowledge of COBIT, ITIL, NIST frameworks and ISO 27001 standards.
• IT systems audit methodology and control testing.
• Understanding of ICFR, ITGCs, ITACs and SOX requirements.
• Familiarity with SAP, Oracle, Microsoft Dynamics, operating systems and databases.
• Business Continuity Planning (BCP) and Disaster Recovery (DRP) concepts.
• Fundamentals of cybersecurity, threats and vulnerabilities.
• Professional certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor (preferred).