Job Summary:
The Senior Officer / Officer – IT Risk Management is responsible for assisting in identifying, assessing, monitoring, and mitigating IT risks associated with the bank’s technology infrastructure, applications, and digital services. This role ensures that IT risk management processes align with regulatory standards, cybersecurity frameworks, and industry best practices to safeguard the organization from threats. Job Responsibilities:
Assist in conducting risk assessments to identify vulnerabilities, threats, and operational risks. Support the evaluation of IT systems, applications, and business processes to determine risk exposure. Maintain and update an IT risk register, tracking identified risks and remediation actions. Support the implementation of risk management policies, controls, and mitigation strategies. Assist in developing risk treatment plans to enhance security and minimize IT operational risks. Ensure adherence to business continuity (BCP) and disaster recovery (DR) plans by IT teams. Ensure IT risk management practices comply with local and international regulations (ISO 27001, PCI DSS, GDPR, NIST, COBIT, etc.). Assist in preparing compliance reports for internal and external audits. Stay updated with regulatory changes, risk management trends, and cybersecurity developments. Support the IT team in analysing, reporting, and responding to security incidents. Assist in root cause analysis and post-incident evaluations to identify risk factors. Maintain detailed records of IT risk events and security incidents. Work closely with IT security, governance, and compliance teams to integrate IT risk management into daily operations. Assist business units in understanding IT risk policies and procedures. Coordinate with internal auditors, regulatory bodies, and external consultants for IT risk assessments. Prepare reports on risk assessments, security compliance, and IT audit findings. Maintain comprehensive documentation of risk management policies and procedures. Support senior management with data-driven insights on IT risk trends and mitigation strategies.
Job Qualifications: Bachelor's degree in Information Technology, Computer Science, Business Administration, accounting or a related field. Advanced certifications such as CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or equivalent are highly desirable. Senior Officer: Minimum 2 years of experience in IT risk management, cybersecurity, or IT governance. Officer: Fresh Graduate or experienced in risk assessment, IT security, or compliance support.