IT Risk Management
TAWANTECH
Posted on 26 Feb
Send me Jobs like this
Nationality
Any Nationality
Gender
Not Mentioned
Vacancy
1 Vacancy
Job Description
Roles & Responsibilities
Key Responsibilities
- Develop and maintain IT Risk Management Framework and IT Risk Register
- Define and monitor IT Risk Appetite and KRIs
- Conduct IT & Cyber risk assessments across applications, infrastructure, cloud, cybersecurity, and third parties
- Perform inherent and residual risk analysis
- Ensure compliance with:
- Saudi Central Bank Cybersecurity Framework (CSF)
- National Cybersecurity Authority Essential Cybersecurity Controls (ECC)
- International Organization for Standardization ISO 27001
- ISACA COBIT
- PCI Security Standards Council PCI-DSS
- Monitor remediation plans and control effectiveness
- Prepare IT Risk reports for Senior Management, Risk Committee, and Board
- Manage third-party IT risk assessments
- Support internal and regulatory audits
Desired Candidate Profile
Must Have
- Banking IT risk experience
- Regulatory audit exposure
- Strong risk assessment background
- Professional certification (CISA/CISM/CRISC/CISSP)
8+ years IT / Cyber Risk experience
- Banking or financial services experience (KSA preferred)
- Strong regulatory exposure (SAMA CSF / NCA ECC)
- Experience managing IT Risk Register
- Experience with GRC tools (Archer, ServiceNow GRC, MetricStream, AuditBoard)
- Certifications preferred: CISA, CISM, CRISC, CISSP
Company Industry
- IT - Software Services
Department / Functional Area
- IT Software
Keywords
- IT Risk Management
Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at abuse@naukrigulf.com
Similar Jobs
Information Security Officer
INTALEQ
- 8 - 15 Years
- Doha - Qatar
Business Analyst (ICT Governance)
Starlink WLL
- 5 - 10 Years
- Doha - Qatar
IT & Cybersecurity Consultant - Internal Audit
Dicetek LLC
- 10 - 15 Years
- Dubai - United Arab Emirates (UAE)
Infrastructure & Cybersecurity Lead
Nazih Trading Company LLC
- 4 - 6 Years
- Sharjah - United Arab Emirates (UAE)
IT Project Manager
Dicetek LLC
- 10 - 15 Years
- Dubai - United Arab Emirates (UAE)