Risk Management Expert

Overview

We are seeking a Risk Management Expert specialized in Information Technology to provide expert guidance on evaluating and managing IT-related risks within a governmental organization in Riyadh, Saudi Arabia.

Primary Duties

• Advise on the analysis and evaluation of risks affecting the IT landscape.
• Suggest ongoing security assessment activities consistent with the Technology Risk Management Framework.
• Guide strategies for handling cybersecurity incident responses.
• Recommend measures to track emerging security threats and coordinate risk mitigation actions with Operational Risk Management.
• Evaluate disaster recovery and business continuity strategies, coordinating with relevant risk management teams.
• Ensure cybersecurity resilience elements are integrated within the Business Continuity Plan.
• Identify and propose recommendations on information security controls’ effectiveness in risk mitigation.
• Advocate actions to safeguard IT assets from cyber threats linked to third parties.
• Review user security awareness assessment procedures and plan enhancements.
• Collaborate with Human Resources and Corporate Communications departments to design and implement security awareness initiatives that comply with applicable legislation and standards.
• Adhere to organizational policies, standards, and assigned tasks from supervisors.

Qualifications

• Possess at least six years of experience in relevant IT risk management roles.
• Hold a bachelor’s degree in Cybersecurity or a closely related discipline.