Information Technology Risk Manager

Job Title:

Administrator IT Risk Enablement and Value Delivery

Location:

Riyadh

We are seeking a highly experienced IT Risk Manager to lead and manage the IT Risk Program across the Group. The role will oversee IT Risk Governance, Threat Modelling, Architecture Risk, IT Strategy alignment, Capability Management, Risk Monitoring & Aggregation, KRI & KPI measurement, and ERM/ORM integration with IT Risks to ensure alignment with industry best practices.

The ideal candidate will also be responsible for mapping business processes, products, and technology landscapes to identify risk exposure areas and opportunities for enhancement and enablement.

• Lead and manage the Group-wide IT Risk Management framework.
• Oversee IT Risk Governance, Threat Modelling, and Risk Architecture practices.
• Monitor and aggregate IT risks, ensuring effective KRI & KPI measurement.
• Integrate IT risks within ERM and ORM frameworks.
• Conduct risk assessments, mitigation planning, and ongoing risk management activities.
• Perform root cause analysis for IT-related issues and incidents.
• Conduct target system analysis and control effectiveness reviews.
• Support analysis, development, and monitoring of IT controls.
• Align IT risk strategy with business objectives and regulatory requirements.
• Manage and coordinate multiple teams and stakeholders across functions.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
• Fluent in English (written and spoken).
• Strong knowledge of IT processes, controls, risk assessment methodologies, and quality assurance functions.
• Proven ability to apply core IT risk principles and frameworks.
• Strong analytical and critical thinking skills.
• Demonstrated experience in risk mitigation and management methodologies.
• Excellent verbal and written communication skills with the ability to engage stakeholders at all levels.
• Proven experience in the financial services industry with strong knowledge of banking processes and practices.