Assistant Manager It Risk

Description

Develop, embed, maintain and implement IT risk management framework, policies and procedures for EBC.

Perform risk assessments on IT systems and solutions, identifying and assessing potential IT risks and vulnerabilities, monitor emerging threats, and collaborate with cross-functional teams to implement effective risk management measures.

Transform the risk assessment exercise into recommended strategies for risk mitigation and action points, follow up with the concerned owners.

Prepare and present risk management reports to different stakeholders.

Educate staff on IT risk management practices by delivering risk awareness for EBC staff.

Oversee the incidents and incident response process related to IT systems and services to ensure identification of the root cause and implementation of the required controls.

Develop key risk indicators to monitor potential threats that may lead to business disruption, financial, compliance, and reputational impact, achieving the company objectives.

Review new contracts or internal policies and procedures related to technical scope.

Assess IT-related changes to ensure that IT risks are managed appropriately and minimize the impact that could affect IT systems and services.

Maintain IT risk register, events log, and control assessments.

Continuously improve and update IT risk management practices and controls monitoring.

Serve as a subject matter expert to technology teams for IT risk management requirements.

Requirements

• Bachelor’s degree in computer science, electronics & communication engineering, technology-related field, or equivalent certification and experience related to IT risks.
• Minimum 10 years of demonstrated technical and functional experience in risk management, IT risk management, and information technology field in banking sector, fintech, or consultancy firms.
• Required licenses or certifications: one or more of the following - CISA, CRISC, ISO 31000, ISACA IT Risk Fundamentals, or similar certifications strongly preferred.
• Working knowledge in two or more of the following IT and risk domains: infrastructure, SDLC, service management, data protection, privacy, IT risk management, third-party risk management.
• Working knowledge of emerging IT risks and risk-intelligent adoption of new and existing technologies.
• Ability to multi-task, prioritize work, and work independently.
• Good communication and presentation skills.
• Ability and willingness to learn new subject areas.
• Ability to work within a fast-paced environment.
• Excellent analysis skills.
• Project management skills are a plus.