Senior Manager - IT Risk Management

About the Job:
The Senior Manager - IT Risk Management at the company is responsible for guiding the assessment of technology, information, and cybersecurity risks related to technology and cybersecurity initiatives and operations. This role involves providing recommendations for risk controls, managing ongoing monitoring of initiatives and operations to ensure proper risk preparedness, and facilitating incident resolution. The Senior Manager will act as a technical risk expert, ensuring regulatory compliance and risk coverage.

Responsibilities:

• Set governance procedures for documenting and updating technology and cybersecurity policies, standards, guidelines, and procedures.
• Document and implement procedures for technology and cybersecurity breach incidents and post-breach activities.
• Facilitate the operational implementation of technology and cybersecurity risk frameworks by Technology and Information Security staff.
• Recommend strategies to address risk areas based on assessments of business needs against security concerns and regulatory requirements.
• Lead risk and control assessments, system assessments, and stress testing to identify risk profiles.
• Review organizational assessments and augment security controls with 3rd party and internal staff.
• Analyze technology and information security risk metrics to address emerging risks.
• Implement routine technology and information security risk monitoring activities.
• Assess risks in new technology/digital initiatives and business technology usage.
• Provide strategic and technical recommendations following the identification of vulnerabilities within IT systems.
• Review existing risk monitoring mechanisms to reflect changing trends, regulations, and industry best practices.
• Enforce, incorporate, and comply with all necessary controls and related information security policies and procedures.

Qualifications:

• A tertiary-level qualification from an internationally/regionally recognized institution, preferably a degree in Finance, Business, Economics, Mathematics/Statistics.
• 5 to 8 years of experience in technology and risk management, preferably in the banking industry.
• A successful track record of implementing IT risk assessment frameworks in a commercial and/or corporate banking environment.
• Strong ability to draw connections between business or operational actions and risk assessment results, as well as communicate insights to a senior audience.

Technical Competencies:

• Business and IT Risk Assessment
• Cybersecurity
• Data Collection and Analysis
• Emerging Technologies
• Policy Implementation

Behavioral Competencies:

• Problem Solving
• Communication

Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time