Job closed
Job description / Role
Reports to: Advisory Leader
JOB BRIEF:
You directly provide our clients Technology Risk Assurance to an expert level.
KEY RESPONSIBILITY AREAS:
You complete the following in line with International Professional Practices Framework (IPPF) standards:
• Planning
• Doing and documenting fieldwork tests
• Discussing your findings with our clients and
• Writing high quality reports to our clients.
• Deliver exceptional client service. You understand and respond to our clients’ needs. You deliver on what you commit.
• You communicate plainly so our clients understand your point.
• You are confident to provide solutions.
• You develop business supported by our business development team.
• You continuously develop yourself.
• You collaborate by building strong relationships within our firm and with our clients.
• Where a team member supports you in fieldwork testing, you manage them to grow their talent.
Requirements
KEY REQUIREMENTS
• You are an expert in IT General Controls Audits
• You are an expert in external and internal vulnerability and penetration testing of firewalls, routers and switches.
• You have significant experience in testing Information Security Governance.
You have significant experience in testing Information Security Management policies including:
• Software patches
• Virus protection and
• Security operations including incident management
You have significant experience in assessing IT Infrastructure configuration and Network Architecture in accordance with appropriate standards such as:
• National Institute of Standards and Technology (NIST)
• SANS Institute
• Information Security Forum (ISF) and
• CISCO
• 27001
• 22301
• You have 8 to 10 years of experience in Technology Risk Assurance.
• You are a Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP) and Certified Information Systems Auditor (CISA).
• Preferable to have Internal Audit experience but not essential as we can train you and give you exposure to Internal Audit within Technology Risk Assurance.
• Experience in Business Continuity Management would be a plus but not essential as we can train you in this area.
About the Company
BDO UAE is the Member Firm of BDO International with 64,300 people working out of over 1,400 offices worldwide.
At BDO UAE, we specialise in helping businesses, whether start-ups or multinationals, to achieve their goals. Through our own professional expertise and by working directly with organisations, we've developed a robust understanding of the factors that govern business growth. Our objective is to use this to help our clients maximise their potential.
We have a partner-led approach, which delivers the highest quality of service by using short, functional chains of communications to aid decision-making. Clients benefit from our fresh thinking, constructive challenge and practical understanding of the issues they face. Developing strong, personal relationships with our clients is at the forefront of our service approach at BDO UAE.