Job Summary:
The
Team Leader
supports the IT Risk Management Manager in
developing risk policies, conducting assessments, and implementing security controls
, ensuring IT-related risks are minimized while maintaining operational efficiency.
Job Responsibilities:
-
Assist in conducting
risk assessments
to identify
IT vulnerabilities, security threats, and operational risks
.
-
Evaluate IT systems, applications, and business processes to determine
risk exposure and mitigation strategies
.
-
Maintain and update an
IT risk register
, tracking identified risks and their treatment plans.
-
Support the implementation of
IT risk management frameworks, controls, and mitigation measures
.
-
Work with IT teams to identify
process improvements and security enhancements
to minimize risks.
-
Ensure
business continuity (BCP) and disaster recovery (DR) plans
are in place and periodically tested.
-
Ensure compliance with
international and local regulatory standards (ISO 27001, PCI DSS, NIST, COBIT, GDPR, etc.)
.
-
Assist in preparing reports for
internal and external audits, regulatory bodies, and risk committees
.
-
Stay updated with
emerging IT risk trends, regulatory updates, and cybersecurity best practices
.
-
Support IT teams in
handling, investigating, and documenting security incidents and IT risk events
.
-
Ensure proper reporting and response to
cybersecurity threats and operational disruptions
.
-
Work closely with
IT security, compliance, governance, and business continuity teams
to integrate IT risk management into daily operations.
-
Coordinate with
business units and technology teams
to ensure awareness and adoption of IT risk policies.
-
Act as a key contact for
regulatory bodies, auditors, and third-party risk management providers.
-
Assist in preparing
risk assessment reports, dashboards, and compliance status updates
.
-
Maintain
detailed documentation of IT risk policies, controls, and risk treatment plans
.
-
Contribute to
risk analysis presentations for senior management and audit committees
.
Job Qualifications:
-
Bachelor's degree in Information Technology, Computer Science, Business Administration, accounting or a related field.
-
Minimum 5 years
of experience in
IT risk management, cybersecurity, IT governance, or IT audit
.
-
Hands-on experience in
conducting IT risk assessments and implementing risk controls
.