Y-Axis Jobs Logo
Send us feedback
telephone  +91 7670 800 001
Log in Sign up Try Premium
IT Risk Management at TAWANTECH
Riyadh, Riyadh Region, Saudi Arabia -
Full Time

Start Date

Immediate

Expiry Date

26 May, 26

Salary

0.0

Posted On

25 Feb, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Risk Management, Cybersecurity, Regulatory Compliance, Risk Assessment, Risk Register, Risk Appetite, KRIs, Cloud Security, Third Party Risk, Risk Analysis, GRC Tools, Audit Support, SAMA CSF, NCA ECC, ISO 27001, PCI-DSS

Industry

Software Development

Description
Role Purpose Responsible for identifying, assessing, monitoring, and reporting IT and Cyber risks to ensure regulatory compliance and protect the bank’s technology environment in alignment with enterprise risk management. Key Responsibilities Develop and maintain IT Risk Management Framework and IT Risk Register Define and monitor IT Risk Appetite and KRIs Conduct IT & Cyber risk assessments across applications, infrastructure, cloud, cybersecurity, and third parties Perform inherent and residual risk analysis Ensure compliance with: Saudi Central Bank Cybersecurity Framework (CSF) National Cybersecurity Authority Essential Cybersecurity Controls (ECC) International Organization for Standardization ISO 27001 ISACA COBIT PCI Security Standards Council PCI-DSS Monitor remediation plans and control effectiveness Prepare IT Risk reports for Senior Management, Risk Committee, and Board Manage third-party IT risk assessments Support internal and regulatory audits 8+ years IT / Cyber Risk experience Banking or financial services experience (KSA preferred) Strong regulatory exposure (SAMA CSF / NCA ECC) Experience managing IT Risk Register Experience with GRC tools (Archer, ServiceNow GRC, MetricStream, AuditBoard) Certifications preferred: CISA, CISM, CRISC, CISSP Must Have Banking IT risk experience Regulatory audit exposure Strong risk assessment background Professional certification (CISA/CISM/CRISC/CISSP)
Responsibilities
The role is responsible for identifying, assessing, monitoring, and reporting IT and Cyber risks to ensure regulatory compliance and protect the bank’s technology environment. Key duties include developing the IT Risk Management Framework, defining risk appetite, conducting various risk assessments, and preparing reports for senior management.