Sr. Specialist IDS Risk, DR & Compliance

Oman Investment Authority

Main tasks and responsibilities:

Identify, assess, and monitor IDS-related risks including, operational, infrastructure, and compliance risks.

Conduct periodic risk assessments, internal audits, and gap analyses.

Collaborate with IT, Cybersecurity, and Enterprise Architecture teams to define and implement control frameworks aligned to ISO 27005, NIST RMF, and COBIT principles.

Maintain a centralized risk register and ensure timely mitigation, acceptance, transfer, or avoidance strategies for each identified risk.

Regularly review risk appetite, metrics, and thresholds in collaboration with Governance and Internal Audit functions.

Lead the design, implementation, testing, and continual improvement of IDS DR plans aligned with ISO 22301.

Define business impact assessments (BIAs), RTOs (Recovery Time Objectives), and RPOs (Recovery Point Objectives) for critical systems and applications.

Coordinate DR simulations, tabletop exercises, and live recovery tests across OQ s digital environments.

Ensure DR strategies are aligned with on-premises, private cloud, and hybrid cloud environments.

Collaborate with business continuity leads across group entities to ensure interdependency planning and resilience readiness.