it risk manager

<div><div><b><i>About Emirates Global Aluminium</i></b><i>
</i></div><div>Emirates Global Aluminium is the world&rsquo;s biggest &lsquo;premium aluminium&rsquo; producer and the largest industrial company in the United Arab Emirates outside the oil and gas industry. EGA is an integrated aluminium producer, with operations on four continents from bauxite mining to the production of cast primary aluminium and recycling. EGA employs over 7,000 of these people including more than 1,200 UAE Nationals. EGA operates aluminium smelters in Jebel Ali and Al Taweelah in the United Arab Emirates, an alumina refinery in Al Taweelah, a bauxite mine and associated export facilities in the Republic of Guinea, a speciality foundry in high strength recycled aluminium in Germany, and a recycling plant in the United States.</div><br>
<div></div>
<div><b>
JOB PURPOSE:</b></div>
<div>
An Associate IT Audit Manager plays a crucial role in ensuring that an organization&rsquo;s information technology systems and processes align with its objectives while meeting regulatory compliance and safeguarding against risks. The key responsibilities include:</div><br>
<div>
</div><ul><li><b>Planning and Designing Audits:</b> Develop comprehensive audit plans that outline the scope, objectives, and methodologies for evaluating the effectiveness, efficiency, and security of IT systems and processes.</li></ul><br>
<div></div>
<ul>
<li><b>Risk Assessment:</b> Conduct risk assessments to identify vulnerabilities in the IT infrastructure, including cybersecurity threats, data integrity issues, and system availability risks. Based on these assessments, prioritize areas for auditing.</li></ul><br>
<div></div>
<ul>
<li><b>Performing Audits:</b> Execute audits according to the planned scope, including reviewing and testing IT controls, systems, and processes to assess their effectiveness. This often involves evaluating IT governance practices, security policies, access controls, disaster recovery planning, and operational procedures.</li></ul><br>
<div></div>
<ul>
<li><b>Reporting Findings:</b> Document audit results, including identified weaknesses or non-compliance issues. Provide clear, actionable recommendations for addressing these issues.</li></ul><br>
<div></div>
<ul>
<li><b>Follow-up and Verification:</b> Follow up on audit findings to ensure that corrective actions have been implemented effectively. Verify that recommendations are carried out and that the desired outcomes are achieved.</li></ul><br>
<div></div>
<ul>
<li><b>Advisory Role:</b> Act as an advisor to management on IT risk management, control, and governance processes. Offer guidance on enhancing IT frameworks, policies, and procedures.</li></ul><br>
<div></div>
<ul>
<li><b>Regulatory Compliance:</b> Evaluate the organization&rsquo;s compliance with relevant industry standards and regulatory requirements related to IT, such as GDPR, ISO27001, ISR, SOX, HIPAA.</li></ul><br>
<div></div>
<ul>
<li><b>Collaboration and Communication:</b> Work closely with IT teams, external auditors, and other stakeholders. Effectively communicating audit findings, risks, and recommendations to both technical and non-technical audiences.</li></ul><br>
<div></div>
<div><b><i>
The above is to be carried out across all EGA sites (JA, AT, GAC, ATA and EGA Subsidiaries) in the following IT functions:</i></b></div>
<ul>
<li>Industrial IT Systems (including SCADA systems).</li>
<li>EGA SAP and other Corporate &amp; Mobile Applications.</li>
<li>IT Governance.</li>
<li>IT Infrastructure (network, telecom, Data Centres etc.)</li>
<li>Information Security (including cyber security).</li>
<li>GRC Access and Process Control systems.</li>
<li>Industry 4.0.</li></ul><br>
<div></div>
<div><b>
KEY ACCOUNTABILITIES:</b></div>
<div><b>
 Mandatory ethical and audit standards prescribed by the IIA</b></div>
<ul>
<li>Embeds the ethical standards and the mandatory standards prescribed by The Institute of Internal Auditors (IIA) in the day-to-day operations. To that effect, he/she shall instruct/supervise/coach his team members about the aforesaid requirement</li>
<li>For deviations brought to his/her attention, the job holder would take steps to resolve the issue. It shall be the responsibility of the position holder to keep the Senior Manager of Corporate &amp; IT and Chief Internal Auditor (CIA) informed of the deviations reported and the steps undertaken to resolve the issue. Should it not be possible for the job holder to resolve the issue, he/she shall seek the guidance of the Senior Manager of Corporate and IT and CIA in this regard.
<div><b>
Departmental Policies, Processes &amp; Procedures</b></div>
Responsible for implementing departmental policies, processes, and procedures in all audits/risk assessments / day-to-day work conducted. To that effect, he/she shall instruct/supervise/coach his/her team members with regard to requirements of the departmental policies and procedures as well as monitor adherence to such policy/procedure. Deviations if any shall be brought to the attention of the Senior Manager of Corporate and IT and Chief Internal Audit (CIA) for corrective action. Develop and maintain effective working relationships with management of the assigned domain and act as the key point of contact. The Associate Manager shall ensure that he/she is aware of all changes in key personnel/processes/systems as well as emerging risks relevant to his/her domain arising out of changes in industry/market / legislation etc.</li>
</ul>
<div><b> Risk Assessment and Audit Plans</b></div>
<ul>
<li>Develop and maintain effective working relationships with management of the assigned domain and act as the key point of contact. The Associate Manager shall ensure that he/she is aware of all changes in key personnel/processes/systems as well as emerging risks relevant to his/her domain arising out of changes in industry/market / legislation etc.</li>
<li>Upon identifying such risk/changes, the Associate Manager shall inform the Senior Manager of Corporate and IT and assist in assessing the emerging risks and their potential impact on the audit plan and propose changes to the plan if required in order to prioritize the high-risk audit units.</li>
<li>Lead the annual risk assessment process relating to the domain and assist the Senior Manager of Corporate and IT in prioritizing the high-risk audit units while preparing the audit plan.</li>
</ul>
<div><b> Assessing Staffing Requirements
</b></div> <div>Assess the staffing requirements for planned and Adhoc audit assignments and advise the Senior Manager Corporate and IT on assigning personnel to audit assignments within the assigned domain. Should the skillset required to conduct an audit not be available in-house, the Associate Manager shall assist the Senior Manager Corporate and IT to plan and execute co-sourced / outsourced audit assignments.</div>
<div><b>
Managing Audit Assignments</b></div>
<ul>
<li>Shall have overall responsibility for independently conducting audits within the domain. To that effect, the Associate Manager&rsquo;s responsibility shall include but not be limited to the following:</li>
</ul><ul><li>Ensure that relevant portion of the audit plan approved by the ARC for the year is achieved and that audits are completed within the defined timeframe. Assist the Senior Manager Corporate and IT in analysing deviations beyond 10% of the allocated time and initiate corrective actions planned.</li>
<li>Plan and scope audit assignments ensuring adequate audit coverage of audit units to most effectively utilize the resources in providing reasonable assurance regarding the control environment.</li>
<li>Develop process flow charts, conduct the process level risk analysis, prepare the risk, and control matrix and assess the design of management&rsquo;s internal controls.</li>
<li>Develop the audit programs including procedures / audit approaches / data analysis for auditing new processes or modifying existing approaches to further enhance the audit coverage / effectiveness.</li>
<li>Execute audit procedures most critical to the audit assignment while conducting the work to ensure that the specified audit objectives are met.</li>
<li>Assist the other auditors in evaluating the IT system controls for the business audits.</li>
<li>Identify control weaknesses, process improvement and cost reduction opportunities.</li>
</ul>
<div><b>Quality of Documentation</b></div>
<div>
Document the test procedures carried out and review the work done by the team members / co-sourced consultants on an ongoing basis in TeamMate / GRC, to ensure that the quality of audit file documentation meets the standards set in the Internal Audit methodology and the IIA&rsquo;s standards.</div>
<div><b>
Recommending Corrective Actions</b></div>
<ul>
<li>Recommend to process owners suitable corrective/preventive actions in order to mitigate/remediate the observations made and risks highlighted ensuring that all accepted recommendations are given clear implementation deadlines or clearly identified as not being accepted.</li>
<li>Leads closing meetings with line and top management to obtain their buy in regarding the recommendations / corrective actions.</li>
<li>Ensure that area managers and the Senior Manager Corporate and IT are informed in a timely manner regarding critical issues to enable quick correction and mitigation of further occurrences.</li>
<li>Conduct monthly follow-up of audit recommendations and report on status of their implementation to the Senior Manager Corporate and IT.</li>
</ul>
<div><b>Preparing Reports</b></div>
<ul>
<li>Review draft reports drafted by team members / co-sourced consultants to ensure that draft reports meet the quality standards required by IA Methodology.</li>
<li>Deliver final versions of draft reports to the Senior Manager Corporate and IT after discussing with management and obtaining their buy-ins with regard to the observations and recommendations made.</li>
</ul>
<div><b>Peer Review and Quality Certification</b></div>
<ul>
<li>The audits conducted/led and carried out by the Associate Manager IA shall be subject to peer reviews and quality assessments on a periodic basis. The Associate Manager would be responsible for implementing the recommendations made in the aforesaid assessments.</li>
<li>The Associate Manager would assist the Senior Manager Corporate and IT and Chief Internal Auditor in achieving the periodic external quality certification.
<div><b>
Managing Co-sourced / Outsourced Audits</b></div>
<ul>
<li>Should the CIA in consultation with the Senior Manager Corporate and IT approve that an audit assignment in the Associate Manager&rsquo;s domain be co-sourced/outsourced either due to unavailability of skillset in-house or resource constraints, the Associate Manager shall have the following responsibilities:</li>
</ul><ul><li>Prepare the request for proposal including technical specifications, areas / scope to be covered, deliverables, manpower required etc.</li>
<li>Assist the Senior Manager Corporate and IT in carrying out the technical evaluation of the proposals received.</li>
<li>Liaison with the external team and monitor the day-to-day progress of the audit assignment;</li>
<li>Assess the work done and the deliverables to ensure that the audit objectives are met.</li>
<li>Lead the closeout meeting with management to agree on the action plans; and</li>
<li>Document the observations in GRC so that these can be followed up later.</li>
</ul>
</li></ul><div><b>Management Requests and Fraud Investigation</b></div>
<ul>
<li>Conducts ad-hoc reviews based on management requests as directed by the CIA.</li>
<li>Participates in the fraud investigations as and when called upon to do so by the CIA.</li>
</ul>
<div><b>Safety, Quality &amp; Environment</b></div>
<ul>
<li>Complies with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment.</li></ul><br>
<div></div>
<div><b>
QUALIFICATIONS &amp; SKILLS:</b></div>
<ul>
<li>University degree in Computer Science.</li>
<li>Holding relevant professional certifications can be beneficial, such as:</li>
</ul><ul><li>CISA (Certified Information Systems Auditor)</li>
<li>CISSP (Certified Information Systems Security Professional)</li>
<li>CISM (Certified Information Security Manager)</li>
</ul>
<div>These certifications attest to the manager's knowledge and expertise in IT audit and security domains.
</div><div>Keep up-to-date with the latest IT trends, risks, and technologies, as well as developments in auditing standards and regulatory requirements.</div>
<div>
Minimum 8 years of working experience, of which:</div>
<ul>
<li>At least 4 years experience in managing IT audits, and</li>
<li>At least 5 years experience in Internal Audit.</li>
</ul>
<div>Exposure to managing/auditing Industrial IT systems in the mining or manufacturing industry would be an added advantage.</div></div>

Manager - IT Audits (UAEN Talent)

Fusion Technology

<p><b>We're Hiring: Risk Management Consultant (Native Arab)</b></p><p>Location: Qatar<br/>Experience Level: Consultant</p><p>We are seeking an experienced Risk Management Consultant / Risk Manager with a strong background in the IT or Telecommunications industry to lead the identification, assessment, and mitigation of risks across business operations, projects, and IT systems. The ideal candidate will have a deep understanding of industry-specific risk factors, including cybersecurity threats, regulatory compliance, and technology infrastructure vulnerabilities.</p><p><b>Key Responsibilities</b></p><p>&middot; Develop and implement enterprise risk management (ERM) frameworks, policies, and processes tailored to the IT/Telecom environment.</p><p>&middot; Identify, analyze, and assess potential risks related to cybersecurity, data privacy, network infrastructure, cloud services, and regulatory compliance.</p><p>&middot; Collaborate with cross-functional teams (e.g., IT, Legal, Operations, Security, Compliance) to mitigate operational, technical, and strategic risks.</p><p>&middot; Conduct regular risk assessments, audits, and gap analyses across systems, applications, and processes.</p><p>&middot; Monitor risk trends, emerging threats, and industry regulations, and advise stakeholders on necessary controls and mitigation strategies.</p><p>&middot; Evaluate vendor and third-party risk, particularly in outsourced IT services or telecom infrastructure.</p><p>&middot; Lead or support business continuity planning (BCP) and disaster recovery (DR) initiatives.</p><p>&middot; Prepare and present risk reports, dashboards, and recommendations to senior leadership or board-level risk committees.</p><p>&middot; Ensure compliance with industry-specific standards and frameworks such as ISO 27001, NIST, ITIL, GDPR, SOC 2, etc.</p><p>&middot; Support internal and external audits, regulatory inspections, and risk assurance activities.</p><p><b>Required Qualifications &amp; Experience:</b></p><p>&middot; Bachelor&rsquo;s degree in Risk Management, Information Technology, Telecommunications, Business Administration, or a related field.<br/>(Master&rsquo;s degree or MBA preferred.)</p><p>&middot; 8+ years of experience in risk management, preferably within the IT or Telecom industry.</p><p>&middot; Strong understanding of information security, IT governance, telecom infrastructure, and regulatory compliance requirements.</p><p>&middot; Experience with risk assessment methodologies and tools (e.g., FAIR, ISO 31000, COSO ERM).</p><p>&middot; Familiarity with cybersecurity frameworks and compliance standards (e.g., NIST, ISO 27001, PCI DSS).</p><p>&middot; Professional certifications such as CRISC, CISM, CISSP, PMP, ISO 27001 Lead Implementer, or similar are highly desirable.</p><p>&middot; Excellent analytical, problem-solving, and communication skills.</p><p>&middot; Ability to manage multiple projects, meet deadlines, and work independently or collaboratively.</p><p>Job Type: Full-time</p>

Risk Manager

Computacenter

<div><div><b>Life on the team</b></div><br>
<div></div>
<p>
Computacenter seeking confident and experienced Enterprise Risk Lead who is accountable for leading the Enterprise Risk function managing and mitigating risks associated with the organization's IT operations and projects. This role involves developing and implementing risk management strategies to ensure the security, integrity, and resilience of IT systems and processes. The Enterprise Risk Manager will work closely with various stakeholders to align risk management practices with the organization's strategic objectives.</p><br>
<div></div>
<div><b>
What you'll do</b></div><br>
<div></div>
<ul>
<li>Enterprise Risk Management Expert - Proficiency in understanding of Risk Frameworks such as ISO 31000, NIST, and COBIT.</li>
<li>Risk Assessment: Ability to identify, assess, and prioritize risks using various methodologies and tools.</li>
<li>In-depth knowledge of IT systems, networks, and infrastructure.</li>
<li>Strong understanding of cybersecurity principles, threats, and mitigation strategies.</li>
<li>Ability to analyse complex data sets to identify trends, patterns, and potential risks.</li>
<li>Strong problem-solving skills to develop effective risk mitigation strategies.</li>
<li>Proficiency in preparing clear and concise risk reports for senior management and stakeholders.</li>
<li>Excellent interpersonal skills to collaborate with various departments and communicate risk-related information effectively.</li>
<li>Understanding of relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA).</li>
<li>Ability to develop and implement risk management policies and procedures.</li>
<li>Ability to align risk management practices with the organization's strategic objectives.</li>
<li>Proactive in identifying potential risks and implementing preventive measures.</li>
<li>Ability to adapt to changing business environments and emerging risks.</li>
<li>Continuous Improvement: Commitment to continuous improvement and staying updated with the latest risk management trends and technologies</li>
<li>Keen attention to detail to ensure accurate risk assessments and reporting</li>
<li>Regulatory Knowledge: In-depth understanding of relevant regulations and compliance requirements</li>
<li>Be quality and process improvement driven - practices where appropriate
</li><li>Continuous Improvement: Monitor and review the effectiveness of risk management practices. Identify opportunities for improvement and implement changes to enhance the risk management framework</li>
</ul>
<div><b>What you'll need</b></div><br>
<div></div>
<ul>
<li>Establish, Maintain, Operate and Continually Improve the Enterprise Risk Management Framework (~ 70%)
</li><li>Define, own and maintain the enterprise risk management framework, process and policy to align with CC Group Risk framework &amp; cyber security risk.
</li><li>Policy Development: Create and maintain IT risk management policies, procedures, and guidelines. Ensure compliance with industry standards and regulatory requirements.</li>
<li>Develop capability strategies identifying and enhance processes where automation has the potential to improve efficiency
</li><li>Risk Identification and Assessment: Identify and assess risks related to IT operations, projects, and systems. Conduct regular risk assessments and develop risk profiles.</li>
<li>Risk Mitigation: Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks. Ensure that risk mitigation plans are effectively executed.</li>
<li>Monitor and continuously enhance the Risk management process in line with the Target Operating Model (TOM) - define and educate key stakeholders and support them in identifying, detailing and managing risks across the department.</li>
<li>Creatively apply knowledge of risk management strategies, frameworks and processes to support internal operations and the wider impact / knock-on effects to our customers.
</li><li>Balance the risk narrative to highlight effective controls as well as control gaps</li>
<li>Build risk culture and sensitivity to opportunity risks as well as operational risks</li>
<li>Align work with internal associated risk management policies and processes, and with external regulatory requirements and market
</li><li>Support of the IT business continuity process and disaster recovery processes, and the associated risks
</li><li>Monthly reporting is delivered against KRIs for the Risk Management Group, aligned to the balanced scorecard.</li>
<li>Change approval governance processes are followed.</li>
</ul>
<p>Team Leadership (~ 10%)</p>
<ul>
<li>Provide direct support to the Head of Performance Management, and lead the Enterprise Risk team, offering guidance &amp; coaching.</li>
<li>Training and Awareness: Develop and deliver training programs to enhance risk awareness and promote a risk-aware culture within the organization.</li>
<li>Establish clear team goals that align with our mission, ensuring the team is well-equipped with the skills and resources to achieve our objectives.</li>
<li>Be an ambassador for the enterprise risk in the extended leadership team, encouraging teamwork, problem solving and sharing ideas.</li>
<li>Support team members in skills development, being a trusted advisor both internally within the GRC function and to other departments.</li>
<li>Maintain professional development activities to ensure skills and credibility remains current and up to date.</li></ul><br>
<div></div>
<div>
Desirable</div><br>
<div></div>
<ul>
<li>CRISC (Certified in Risk and Information Systems Control),
</li><li>CERA (Chartered Enterprise Risk Analyst)</li>
<li>CISM (Certified Information Security Manager),
</li><li>CISSP (Certified Information Systems Security Professional),
</li><li>PMP (Project Management Professional).</li></ul></div><div></div>

Senior Delivery Manager

Road and Transport, RTA Dubai

<br>Job Title<br>IT Governance and Quality Assurance Manager   Roads and Transport Authority   Dubai, UAE<br>Job Description<br>IT Governance and Quality Assurance Manager   Roads and Transport Authority   Dubai, UAE<br> <br>Position Overview<br>The IT Governance and Quality Assurance Manager will be responsible for leading the development, monitoring, and enhancement of governance frameworks, policies, and quality standards across RTA s technical systems. The role ensures compliance with international best practices, reduces operational risks, and promotes continuous improvement in IT performance and governance.<br> <br>Location: UAE<br>Location: Dubai<br>Industry: Information Technology (IT)<br>Function: Information Technology (IT)<br>Gender: Any<br>Candidate Nationality: Any<br>Job Type: Full-time<br> <br>What You ll Do<br> <br>* Monitor technical systems and governance KPIs, identify non-compliance, and recommend corrective actions.<br>* Audit compliance with ISO 38500 and other international IT governance standards.<br>* Review and assess project documents for technical quality and adherence to governance policies.<br>* Lead business continuity, recovery testing, and IT risk management initiatives.<br>* Provide technical advisory support and conduct awareness sessions for departments.<br>* Develop executive dashboards and analytical reports for senior management.<br>* Implement automation tools for testing, reporting, and compliance tracking.<br>* Enhance IT governance frameworks, policies, and performance indicators.<br>* Coordinate with Dubai Digital Authority, vendors, and internal stakeholders to ensure alignment.<br>* Promote innovation, continuous improvement, and cost optimization across IT operations.<br> <br>Ideal Profile<br> <br>* Bachelor s degree in Computer Science, Information Technology, or a related discipline.<br>* Minimum 8 years of experience in IT Governance, Quality Assurance, and Compliance.<br>* Strong knowledge of ISO 38500 and governance frameworks.<br>* Experience in IT risk management, continuity planning, and compliance monitoring.<br>* Excellent skills in developing reports, dashboards, and automation tools.<br>* Strong communication and leadership capabilities.<br> <br><br>

IT Governance and Quality Assurance Manager

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 <br/>
 <br/>
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
 <br/>
 <br/>
 Join EY and help to build a better working world.
 <br/>
 <br/>
 <strong>
  The opportunity
  <br/>
  <br/>
 </strong>
 To support the significant growth of our Technology Risk service in MENA, EY is looking to hire highly qualified resources. Specifically, as part of this job posting, we are looking for a Senior Consultant / Assistant Manager. Working across many different industries, this role will be responsible for executing and leading IT and cybersecurity projects. It is all about listening to our clients, asking the better questions, and supporting them in areas where there are no off-the-shelf solutions.
 <br/>
 <br/>
 <strong>
  Your Key Responsibilities
  <br/>
  <br/>
 </strong>
 A large part of the role will be engagement delivery and EY will expect the candidates to lead and deliver engagements with very minimal supervision. EY also expects the candidates to support executives in development of proposals, presentations and other business development activities. The candidate will be responsible for the delivery and quality of the final reports to EY's clients.
 <br/>
 <br/>
 An existing track record of successful engagement delivery in Technology Risk is expected of all candidates for this role. A Big 4 background or comparable consulting experience is highly advantageous. A broad background across IT and Cybersecurity is expected with specific experience in the following areas:
 <br/>
 <br/>
 <ul>
  <li>
   Expertise in Risk and Governance Frameworks, including IT governance frameworks (e.g., COBIT, ITIL, NIST), ISO 27001 standards, information security principles, policy development, and risk assessment.
  </li>
  <li>
   Proficiency in IT Systems Audit, encompassing planning, execution, audit methodologies, complex IT environment evaluation, control weakness identification, and effective communication of findings.
  </li>
  <li>
   Comprehensive knowledge of internal controls over financial reporting (ICFR), covering ITGCs, ITACs, SOX requirements, supporting financial audits with IT expertise, and strong liaison skills with financial auditors.
  </li>
  <li>
   Good understanding around the application systems such as SAP, Oracle, Microsoft Dynamics and operating systems and databases.
  </li>
  <li>
   Strong understanding of Business Continuity Planning (BCP), including BCP/DRP principles, business impact analyses, recovery strategy development, and plan testing.
  </li>
  <li>
   Strong understanding of cybersecurity fundamentals, including common threats, vulnerabilities, basic principles, and contributions to cybersecurity discussions.
  </li>
  <li>
   General Skills: Excellent analytical, problem-solving, communication, presentation, project management, organizational, leadership, client service, and business development skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills And Attributes For Success
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or in a related field.
  </li>
  <li>
   Relevant professional certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Auditor) are preferred.
  </li>
  <li>
   Minimum of 3 to 5 years of experience in IT audit, information security, or related fields.
  </li>
  <li>
   Strong knowledge of ITGC/ITAC, information security frameworks, and cybersecurity best practices.
  </li>
  <li>
   Excellent analytical, problem-solving, and communication skills.
  </li>
  <li>
   Ability to work independently and collaboratively within a team environment.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What We Offer You
  <br/>
  <br/>
 </strong>
 At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 <br/>
 <br/>
 Are you ready to shape your future with confidence? Apply today.
 <br/>
 <br/>
 To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
 <br/>
 <br/>
 <strong>
  EY
 </strong>
 | Building a better working world
 <br/>
 <br/>
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 <br/>
 <br/>
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 <br/>
 <br/>
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
</div>


SC / AM - Technology Risk, Rapid Innovations, Pakistan

<div><div><div><div>India</div>
</div><div><div>Information Technology (IT)
</div></div><div><div>Group Functions
</div></div><div><p><b>Job Reference #</b></p>
<div>326554BR</div>
</div><div><p><b>City</b></p>
<div>Pune</div>
</div><div><p><b>Job Type</b></p>
<div>Full Time
</div></div><div><p><b>Your role</b></p>
<div>Are you a highly experienced in identifying, assessing, and managing risks? Do you have a knack for cloud technology? Do you have an analytic mind? Do you enjoy working within collaborative team to improve the risk posture of the organization and want to support UBS against Data Exfiltration and Data Misplacement Threats.
<br>
<br>
We&rsquo;re looking for someone who can/ has:<br>
<br>
&#61485; complete understanding of cloud deployment and service model with deep understanding of the responsibility matrix and its relationship with cloud deployment and service model<br>
&#61485; define cloud centric controls specifically for Third party IT services and independently perform IT Risk Assessments
&#61485; <br>
guide a team of control and risk assessors in managing Third Party IT Services control and governance operations<br>
&#61485; coordinate and manage all the aspects of operational management related to Third Party IT services governance and control process including but not limited to the achievement of KPAs for the process, process improvement etc.<br>
&#61485; interact with senior stakeholders and communicate security issues and control requirements in non-technical language<br>
&#61485; handle queries / clarifications from requestor / application teams on Third Party IT Service specific controls<br>
&#61485; demonstrate strong investigative and analytical skills<br>
&#61485; participate in initiatives to improve Risk Assessment processes, and related tools/templates and provide feedback</div>
</div><div><p><b>Your team</b></p>
<div>You'll be working in a global team that is responsible for governing controls for third party provided IT services based out of Pune. The team is spread at global locations and comprises of cloud security experts, cyber and technology risk specialists involved in design, implementation, monitoring and reporting of cloud controls.</div>
</div><div><p><b>Your expertise</b></p>
<div>You have:<br>
&#61485; proven experience in a role like this<br>
&#61485; excellent analysis skills<br>
&#61485; prior experience working with multiple teams (local, virtual/global) and ability to co-ordinate and manage tasks<br>
&#61485; exceptional communication and interpersonal skills<br>
&#61485; prior working experience in Banking and/or Finance industries<br>
&#61485; the ability to take responsibility and stay focused on objectives with a can-do-attitude<br>
&#61485; experience in data management &ndash; corelating data from different data sources to join the dots and provide insights into patterns<br>
<br>
You have/are:<br>
&#61485; <br>
bachelor&rsquo;s/master&rsquo;s degree or equivalent in Information Technology / Cyber Security / Computer Science or related disciplines
&#61485; <br>
ideally 6+ years of experience in Risk Management/ Control implementation and remediation
&#61485; <br>
preferably have professional qualifications/certifications (e.g., CRISC, CISA, CCSP, CISM, CCSA)
&#61485; <br>
a strong communicator, comfortable interacting with colleagues at all levels<br>
&#61485; able to effectively guide IT Risk Assessment &amp; data management teams and manage process independently<br>
&#61485; able to apply technical understanding to practical problems<br>
&#61485; a result-oriented worker, with the ability to set priorities<br>
&#61485; innovative and capable of using data and digital solutions to transform<br>
&#61485; showing drive and are accountable</div>
</div><div><p><b>About us</b></p>
<div>UBS is the world&rsquo;s largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal &amp; Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors.<br>
<br>
We have a presence in all major financial centers in more than 50 countries.</div>
</div><div><p><b>How we hire</b></p>
<div>We may request you to complete one or more assessments during the application process. Learn more</div>
</div><div><p><b>Join us</b></p>
<div>At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We&rsquo;re dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. And we use artificial intelligence (AI) to work smarter and more efficiently. We also recognize that great work is never done alone. That&rsquo;s why collaboration is at the heart of everything we do. Because together, we&rsquo;re more than ourselves.<br>
<br>
We&rsquo;re committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us.</div>
</div><div><p><b>Contact Details</b></p>
<div>UBS Business Solutions SA<br>
UBS Recruiting</div>
</div><div><p><b>Disclaimer / Policy statements</b></p>
<div>UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.</div></div></div></div><div></div>

Senior Risk Assessor (TPIS)

DiXiO Experts

<b>We are hiring!</b> <p></p> <p>DiXiO is on a mission to innovate financial messaging, and now, you can be part of it too!</p> <p>We are looking for a<b> Cybersecurity Auditor </b>who will join a team of experts to help us secure our applications for the financial messaging industry. The role holder is responsible for running independent assessments for our clients to ensure that their infrastructures are safe and secure.</p> <p> <strong>Things you will do:</strong> </p> <div>  Execute the day-to-day activities of IT audit engagements, including planning, fieldwork,</div> <div>reporting and follow up on audit findings</div> <div>  Responsible for leading and delivering audit assignments globally using a risk-based</div> <div>approach to deliver a wide range of IT governance, cyber/IT/data security, risk, and</div> <div>regulatory compliance related audits for various organizations.</div> <div>  Perform risk-based audits and assess the effectiveness of controls in place</div> <div>  Evaluate the design and effectiveness of technology controls throughout the business cycle</div> <div>  Prepare and present written reports and other technical information in a pertinent, concise,</div> <div>and accurate manner for distribution to management/clients and identify and other related</div> <div>stakeholders.</div> <div> <br> </div> <p> <strong>To be part of our team, you need to be:</strong> </p> <ul> <li>Ambitious</li> <li>Curious and Innovative</li> <li>Autonomous</li> <li>Team-player</li> </ul> <p> <strong>Things that you need to succeed on this job:</strong> </p> <ul> <li>1 - 2 years of experience in Cybersecurity and IT Risk Management</li> <li>MS Office 365 Applications </li> <li>Knowledge of Information Security, IT Risk Management, IT Audit, IT Governance, SWIFT CSCF Compliance, ISO/IEC 27001, NIST, COBIT</li> <li>Proficient in English and Arabic</li> <li>Knowledge of IT infrastructure security (firewalls, databases, OS, etc.)  </li> </ul> <p> <strong>Why you will love working with us:</strong> </p> <p>If you are searching for an organization that is willing to invest in your professional career, look no more. We provide our Experts with all the tools and investments needed to fulfil their career and professional aspirations. You also don t need to worry about getting stuck in traffic at 8:00AM, we are 100% remote, and our Experts can work from anywhere! Our team also enjoys an unlimited number of leave days to make sure they are reaching a work-life balance. That s not all, our packages include a medical insurance and performance-based bonus!</p> <p><br></p> 
<div></div>

IT/ Cyber Security Auditor (Remote)

Search 10000+ It risk manager jobs near you this October. New roles added regularly across leading industries. Apply today.