About Deloitte: When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including Best Employer in the Middle East, and Best Consulting Firm, and the Middle East Training & Development Excellence Award.
Our PurposeDeloitte makes an impact that matters. Every day we challenge ourselves to do what matters most—for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities.
Our shared values guide the way we behave to make a positive, enduring impact:
During your tenure as a Manager, you will demonstrate and develop your capabilities in the following areas:
- Lead the planning and delivery of complex risk advisory engagements, including internal audit, risk management, internal controls, compliance, and governance engagements for clients across sectors.
- Manage end-to-end internal audit assignments, including risk assessment, annual internal audit planning, process walkthroughs, control design assessment, operating effectiveness testing, issue validation, and reporting.
- Advise clients on enterprise risk management frameworks, risk governance structures, risk registers, risk appetite articulation, risk taxonomy design, and risk reporting processes.
- Lead projects involving internal control review, process risk and control matrix development, control rationalization, control remediation planning, and enhancement of governance and assurance frameworks.
- Support clients on ICFR-related initiatives, including scoping, documentation, controls evaluation, testing oversight, remediation tracking, and coordination with management and external auditors where applicable.
- Deliver compliance and regulatory advisory engagements, including policy and procedure review, compliance framework assessment, obligation mapping, and monitoring program design.
- Identify control gaps, process inefficiencies, and emerging risk themes, and translate these into practical, business-relevant recommendations that help clients address strategic, operational, financial, regulatory, and control-related risks.
- Manage client relationships on a day-to-day basis, including steering meetings, issue resolution, expectation management, and executive-ready reporting.
- Manage multiple workstreams simultaneously, ensuring effective coordination, timely execution, and alignment with engagement objectives.
- Review work performed by team members to ensure technical quality, consistency, and alignment with engagement objectives and Deloitte quality standards.
- Apply strong advisory capability, stakeholder management, project leadership, and risk and controls expertise across client engagements.
- Contribute to proposals, thought leadership, market scans, client presentations, and account development activities to support practice growth.
- Support the growth of the practice by contributing to high-quality solutions across business process, compliance, and control transformation agendas.
- Coach, mentor, and develop Senior Consultants and Consultants through active feedback, delegation, and on-the-job learning.
- Strengthen team delivery capability by leading engagements, managing teams effectively, and fostering high-performance ways of working.
GRC Domain Experience
- * Leading internal audit co-sourcing and outsourcing engagements across complex client environments.
- Designing, assessing, and enhancing enterprise risk management frameworks and risk governance structures.
- Delivering governance, risk, and compliance assessments to identify gaps, strengthen oversight, and improve control environments.
- Leading or supporting third-party risk management assessments and program design.
- Advising clients on business continuity management and resilience-related initiatives.
- Leading internal control reviews and controls transformation programs to enhance risk mitigation and operational effectiveness.
- Supporting ICFR readiness engagements, including scoping, documentation, control assessment, testing, and remediation tracking.
- Assessing and enhancing risk and compliance operating models, including roles, responsibilities, and governance mechanisms.
- Reviewing and redesigning policies, processes, and controls to improve compliance, efficiency, and accountability.
- Preparing and presenting insights, findings, and recommendations for board, audit committee, and senior management reporting.
Leadership Capabilities
- * Builds own understanding of our purpose and values; explores opportunities for impact.
- Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.
- Understands expectations and demonstrates personal accountability for keeping performance on track.
- Actively focuses on developing effective communication and relationship-building skills.
- Understands how their daily work contributes to the priorities of the team and the business.
Qualifications
- * Bachelor’s degree required; a master’s degree, such as an MBA or MSc in Risk, Information Security, or a related field, is an advantage.
- Relevant professional certifications, such as CIA, CPA, CA, ACCA, CISA, CRMA, or equivalent, are preferred.
- Proven regional experience in the Middle East is an advantage.
- Demonstrated experience supporting proposals, business development, and practice-building initiatives.
- Significant experience gained within a Big 4 firm, top-tier consulting environment, or GRC technology delivery organization is preferred.
- 8 to 12 years of overall professional experience, including at least 5 years of relevant GRC experience.
- Proven track record of delivering multiple GRC engagements for telecom clients across global markets.
- Demonstrated experience delivering projects across the Middle East, North Africa, or South Asia is strongly preferred.
- Fluency in English is required; Arabic language capability is a strong advantage, particularly for UAE, KSA, Egypt, and Jordan-based roles.
- Demonstrated exposure to risk and control automation, GRC platforms, data-driven auditing, and continuous controls monitoring.
- Experience working within regulated sectors such as telecom, media, technology, sports, or large diversified groups is preferred.
