Principal Analyst- Tech Risk - Infrastructure Emiratised role

JOB PURPOSEThe selected candidate will report into VP Tech GRC and lead efforts to:Provide advisory services to Enterprise Architecture Infrastructure and Workplace Services teams with regards to best practices compliance requirements and risk mitigation controls;monitor and report on the timely and appropriate remediation of IT risks and issues;maintain oversight of regulations circulars and notifications relevant to IT operations and controls and accordingly advise IT project and technical teams.Prepare regular reports covering risk findings vulnerabilities KPIs and KRIs across IT Infrastructure & Workplace Services to be communicated to Senior/Executive Management while tracking related actions and decisions.Prepare regular reports covering risk findings and service improvements related to Enterprise ArchitectureCreate IT Control Governance & Compliance selfassessment checklists share with infrastructure and enterprise architecture teams and regularly track related results trends KPIs and KRIs.Ensure that appropriate risk and compliance inputs are shared timely with relevant parties when drafting Risk Acceptance Forms Project Business Cases Plans Requirements Documents etc.Support the analysis of vulnerability trends conduct action plan reviews and provide overall remediation oversightSupport and provide governance and risk oversight related to information security reviews and assessments.Facilitate risk assessments internal and external audits across the assigned Group Technology teams.Assure quality of evidences and findings associated with technology risk and control self assessments.KEY ACCOUNTABILITIES GovernanceSupport activities related to the development implementation and compliance oversight of IT Policy and processes particularly those relating to infrastructure components and services.Review and provide advice on the creation of IT Infrastructure and SecOps SOPs.Provide sound ITGRC advisory services to Infrastructure and Security Operations teams while demonstrating a strong understanding of various related IT standards frameworks and good practices.Establish checklists to carry out gap assessments of IT Infrastructure Enterprise Architecture and Security processes and controls against industry standards and ITrelated regulations applicable to the financial sector.Prepare regular dashboards and reports for various working group and committee meetingsRegularly review local IT Service Level performance of IT Infrastructure and Security services collaborating with relevant teams on continuous improvement.Prepare content for regular technology governance and risk committees.Actively participate in relevant technology project committees to ensure adequate and timely governance and risk reviewsMaintain oversight of infrastructure and security IT Incidents ensuring timely rootcauseanalysis reporting to risk and management functions. Risk management and controlUnderstand the overall risk profile and ensure that the risks are managed and prioritized properlyAct as a subject matter expert and create a first line of defence environment for the Banks IT Infrastructure Enterprise Architecture & Security domains with regards to IT risks and remediations.Update maintain and track updates on the risk and vulnerability registers on designated system or records.Facilitate manage and quality assure infrastructure technology risk control selfassessments.Regularly evaluate IT risks and maintain continued awareness of the business and risk profiles and changes in the operating environment and financial markets that may give rise to emerging risks.Report promptly any excesses or exceptions to risk limit to line management for necessary actionEnsure completion and rectification of internal and external audit comments within target datesAssist in IT risk mitigation efforts including the submission of relevant evidences to internal and external control/regulating bodies.Draft reports for an executive audience with regards to the mitigation transfer and/or acceptance of IT risks.Support in preparing risk vulnerability management and security review dashboards.Collaborate with internal technology and security teams to finetune asset inventory and vulnerability management tools reducing false positive alerts and ensuring truly critical issues are prioritised.Facilitate security assessments and internal/external audits with regards to enterprise architecture practices technology infrastructure workplace and security services. Tasks include the identification of appropriate stakeholders timely collection of evidences quality assurance of submitted evidences submission of management responses to control functions and regulators. Qualifications : QualificationsBachelors degree preferably in Information Technology Engineering/ComputingProfessional IT Audit Certification E.g. CISA ISO 20000 LA/LI 27000 LA/LIProfessional IT Infrastructure and Enterprise Architecture CertificationProfessional IT Security Certification E.g. CI