IT Risk & Cybersecurity Consultant / Senior Consultant

About the role

PKF Kuwait is expanding its Risk Consulting and IT Advisory practice and seeks an experienced IT Risk & Cybersecurity Consultant to deliver audit, cybersecurity, regulatory compliance and governance engagements for financial institutions and other sectors.

Key responsibilities

• Execute risk‑based IT internal audit and technology risk assessments, covering ITGC, application controls, infrastructure and third‑party risks.
• Conduct cybersecurity risk assessments, evaluate information security governance, IAM, vulnerability management, incident response and data protection controls.
• Perform regulatory compliance reviews against frameworks such as ISO/IEC 27001, NIST, COBIT, SOC 2 and local CBK requirements.
• Develop audit programs, risk matrices, conduct client walkthroughs, and produce detailed reports with findings and remediation recommendations.
• Contribute to methodology development, proposal preparation and stay current on emerging cyber risks and standards.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or related field.
• Minimum 5 years of experience in IT audit, information security, cybersecurity or technology risk management.
• Experience in professional services or consulting for regulated industries is preferred.
• Relevant certifications such as CISA, CISM, CISSP, CRISC or ISO/IEC 27001 Lead Auditor.

Required skills

• IT governance, risk management and internal control frameworks (COBIT, ISO/IEC 27001, NIST).
• IT General Controls (access, change, operations, backup/recovery) and application control assessments.
• Cybersecurity controls: IAM, vulnerability management, incident response, security monitoring, data protection.
• Business continuity, disaster recovery and operational resilience.
• Third‑party technology risk and outsourcing controls.