IT Risk Management

Role PurposeResponsible for identifying, assessing, monitoring, and reporting IT and Cyber risks to ensure regulatory compliance and protect the bank's technology environment in alignment with enterprise risk management.Key ResponsibilitiesDevelop and maintain IT Risk Management Framework and IT Risk RegisterDefine and monitor IT Risk Appetite and KRIsConduct IT & Cyber risk assessments across applications, infrastructure, cloud, cybersecurity, and third partiesPerform inherent and residual risk analysisEnsure compliance with:Saudi Central Bank Cybersecurity Framework (CSF)National Cybersecurity Authority Essential Cybersecurity Controls (ECC)International Organization for Standardization ISO 27001ISACA COBITPCI Security Standards Council PCI-DSSMonitor remediation plans and control effectivenessPrepare IT Risk reports for Senior Management, Risk Committee, and BoardManage third-party IT risk assessmentsSupport internal and regulatory auditsRequirements8+ years IT / Cyber Risk experienceBanking or financial services experience (KSA preferred)Strong regulatory exposure (SAMA CSF / NCA ECC)Experience managing IT Risk RegisterExperience with GRC tools (Archer, ServiceNow GRC, MetricStream, AuditBoard)Certifications preferred: CISA, CISM, CRISC, CISSPMust HaveBanking IT risk experienceRegulatory audit exposureStrong risk assessment backgroundProfessional certification (CISA/CISM/CRISC/CISSP)#J-18808-Ljbffr