IT Risk Manager

Description

Key Responsibilities

• Risk identification and assessment: Identify potential threats (e.g., data breaches, system failures, non-compliance) and evaluate their potential impact on the organization's security, reputation, and finances.
• Policy and framework development: Create, implement, and maintain IT risk management policies, procedures, and security frameworks.
• Mitigation and control: Develop and implement strategies and controls to reduce or manage identified risks. This includes ensuring IT systems are structured to align with business goals and are protected from breaches.
• Compliance and regulation: Ensure the organization complies with industry regulations, legal requirements, and internal policies related to IT security and data management.
• Monitoring and reporting: Continuously monitor IT systems for security issues, track key risk indicators, and prepare comprehensive reports on risk management activities and the effectiveness of mitigation strategies for senior management.
• Business continuity planning: Develop and maintain business continuity and disaster recovery plans to minimize the impact of system failures or other disruptions.

Skills, Knowledge & Expertise

• Strong analytical and critical thinking skills.
• Expertise in IT security and risk assessment methodologies.
• Degree in IT, Computer Science or related field is required.
• Knowledge of relevant industry regulations and standards.
• Excellent collaboration and communication skills to work with different departments and inform management.
• Proficiency in using risk management software and tools.
• Experience with SAMA is preferred but not required.

About Tabby