it risk manager

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
The IT risk manager will identify, assess, and mitigate risk to Tabby's IT systems, assets, and data by developing and implementing risk management policies and controls.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Risk identification and assessment: Identify potential threats (e.g., data breaches, system failures, non-compliance) and evaluate their potential impact on the organization's security, reputation, and finances.</li>
<li>Policy and framework development: Create, implement, and maintain IT risk management policies, procedures, and security frameworks.</li>
<li>Mitigation and control: Develop and implement strategies and controls to reduce or manage identified risks. This includes ensuring IT systems are structured to align with business goals and are protected from breaches.</li>
<li>Compliance and regulation: Ensure the organization complies with industry regulations, legal requirements, and internal policies related to IT security and data management.</li>
<li>Monitoring and reporting: Continuously monitor IT systems for security issues, track key risk indicators, and prepare comprehensive reports on risk management activities and the effectiveness of mitigation strategies for senior management.</li>
<li>Business continuity planning: Develop and maintain business continuity and disaster recovery plans to minimize the impact of system failures or other disruptions.</li></ul> 
<div></div>
<h3 class="jobSectionHeader">
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Strong analytical and critical thinking skills.</li>
<li>Expertise in IT security and risk assessment methodologies.</li>
<li>Degree in IT, Computer Science or related field is required.</li>
<li>Knowledge of relevant industry regulations and standards.</li>
<li>Excellent collaboration and communication skills to work with different departments and inform management.</li>
<li>Proficiency in using risk management software and tools.</li>
<li>Experience with SAMA is preferred but not required.</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

IT Risk Manager

RP International

<div>
 
 
 Manager of Technology Risk, Information Technology.
 
 The role is responsible for leading the identification, evaluation, and mitigation of technology-related risks within a banking environment. This includes ensuring that risks across the technology landscape are recognized, assessed, and managed in line with established risk management frameworks and organizational risk appetite. The position also promotes a practical risk-conscious culture across IT operations, balancing security and compliance with business and operational priorities.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Risk Management
 
 
 <ul>
 <li>
 Design, implement, and maintain a comprehensive IT risk management framework aligned with industry standards and regulatory requirements, including CBO, SAMA, Basel II/III, and NIST.
 </li>
 <li>
 Conduct regular risk and control self-assessments (RCSA) across core banking systems, digital platforms, and technology infrastructure.
 </li>
 <li>
 Produce insightful technology risk reports, including key risk indicators (KRIs) and thresholds, coordinating with second-line risk teams.
 </li>
 <li>
 Oversee risk management for third-party vendors, cyber threats, data privacy, and operational resilience.
 </li>
 <li>
 Work closely with Information Security, Compliance, and Internal Audit to ensure cohesive and integrated risk practices.
 </li>
 <li>
 Support regulatory inquiries, audits, and assurance reviews by financial authorities and rating agencies.
 </li>
 <li>
 Develop and deliver risk awareness and training initiatives to enhance accountability and risk ownership across IT teams.
 </li>
 </ul>
 
 
 
 
 
 Leadership &amp; Collaboration
 
 
 <ul>
 <li>
 Lead and mentor a small team of technology risk professionals, ensuring a balance between operational needs and risk mitigation.
 </li>
 <li>
 Partner with IT, cybersecurity, legal, and risk teams to embed governance, risk, and compliance objectives into policies and procedures.
 </li>
 <li>
 Act as a strategic advisor to senior leadership on technology risk matters, offering practical solutions that consider both compliance and operational requirements.
 </li>
 <li>
 Serve as a primary point of contact for external stakeholders, including auditors, regulators, and industry peers.
 </li>
 </ul>
 
 
 
 
 
 Qualifications &amp; Experience
 
 
 
 
 Education &amp; Certifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Technology, Computer Science, Risk Management, or a related field; Master&rsquo;s degree preferred.
 </li>
 <li>
 Relevant certifications in technology and risk disciplines (e.g., GRC/Cybersecurity, ITIL, COBIT, PMP).
 </li>
 </ul>
 
 
 
 
 
 Professional Experience
 
 
 <ul>
 <li>
 Minimum of 10 years in technology roles, including at least 5 years in technology risk, preferably within financial services.
 </li>
 <li>
 Strong background in IT disciplines beyond GRC to support informed decision-making.
 </li>
 <li>
 Proven ability to provide pragmatic risk guidance, balancing risk with operational needs.
 </li>
 <li>
 Demonstrated experience in driving cultural change and implementing best-practice risk assessment processes.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Competencies
 
 
 <ul>
 <li>
 Strong networking, influencing, and stakeholder management skills.
 </li>
 <li>
 In-depth knowledge of risk management frameworks in banking and financial services.
 </li>
 <li>
 Excellent analytical, problem-solving, and attention-to-detail skills.
 </li>
 <li>
 Leadership skills with clear, concise communication abilities (oral and written).
 </li>
 <li>
 Creative, &ldquo;out-of-the-box&rdquo; thinking for problem-solving.
 </li>
 <li>
 Ability to drive change and deliver results under tight timelines.
 </li>
 <li>
 Professional demeanor with tact, flexibility, and empathy.
 </li>
 </ul>
 
 
</div>

Manager

Grant Thornton

<div><div><h4 class="jobSectionHeader">Job Overview</h4>
<div>We&rsquo;re a large and growing professional services firm that still feels like a community. With over 76,000 professionals in more than 150 countries, we combine global scale with local expertise to help dynamic organizations unlock their potential for growth. We truly care about our colleagues, our clients, and the communities where we work and live.

As an Assistant Manager, you&rsquo;ll empower the team, deliver excellence, lead the way in shaping strategies and exceeding client expectations, and make a meaningful impact. Discover your purple and join our Business Risk Services Team today!
Let us paint a picture for you

Imagine being part of a team that puts &ldquo;we before me&rdquo;, where flexibility is a mindset, and where you trust your colleagues to have your back.

Imagine working for an organization that believes in the power of authenticity in everything that we do. Whether you're steering discussions in a client meeting, tackling your fear of heights at the top of the Burj Khalifa or ziplining across Jebel Jais &ndash; bring your true self to work. Be a part of a team driven by a purpose of shaping the world that we live in, based on trust and integrity in markets, dynamic businesses, and communities where businesses and people thrive.

Join us to expand your horizons, be inspired, face challenges, and most importantly, be yourself.

About the Business Risk Services Line
Discover tailored risk solutions with our BRS team. From proactive risk detection to optimizing internal controls, we empower your organization with strategies that drive efficiency and safeguard against threats. With a focus on transparency and collaboration, we build robust audit frameworks that ensure resilience and foster growth in an ever-changing business landscape.

As an Assistant Manager some of your responsibilities will include:
<ul>
<li>Taking a leading role in delivery, a variety of client engagements including IT Risk Assessments, IT Audit Planning, Application reviews/ assessments, Governance Risk &amp; Compliance, Network Configuration, Database Configuration Reviews, Data Analytics, SOD Analysis and Business Process Understanding</li>
<li>Developing and executing comprehensive IT Audit plans, including identifying key areas of risks, defining scope, and setting objectives</li>
<li>Evaluating IT infrastructure, applications, and processes to identify potential risks and vulnerabilities related to data security, privacy, and operational efficiency</li>
<li>Assessing the design and effectiveness of IT controls, including accessing controls, data integrity, system development, and IT operations</li>
<li>Ensuring that IT processes comply with relevant laws, regulations, and industry standards (e.g., GDPR, ISO standards etc.)</li>
<li>Assisting clients in applying key frameworks</li>
<li>Preparing detailed audit reports that outline findings, assess the impact of identified risks, and provide actionable recommendations for improvement</li>
<li>Executing assigned client engagements from start to completion, which includes the overall planning, execution, direction, and completion of engagements and managing the engagements to budget</li>
<li>Managing the day-to-day aspects of engagements, including managing multiple work streams simultaneously and re-prioritizing tasks when unanticipated issues arise</li>
<li>Applying current knowledge of IT trends and systems processes to identify security and risk management issues, as well as other opportunities for overall process improvement</li>
<li>Maintaining professionalism and rapport with clients as well as proactively interacting with key client management to manage expectations, help ensure client satisfaction, meet client deadlines, and resolve any problems</li>
</ul></div>
<h4 class="jobSectionHeader">Skills</h4>
<div>Think you've got what it takes to be an Assistant Manager? Like the color purple? Great. Here's a few more boxes we're also hoping you can tick:
<ul>
<li>7+ years of related work experience in IT Audit &ndash; Risk Advisory within a top international consulting firm</li>
<li>Significant experience of undertaking external audits (i.e. IT General Controls) and / or IT internal audits</li>
<li>Professionally qualified (CISA)</li>
<li>Understanding risk management process &amp; treatment &ndash; especially in terms of highlighting threats and raising recommendations to mitigate risks</li>
<li>Familiar with key financial systems and supporting software including ERP</li>
<li>Some exposure to data analytics software</li>
<li>Having exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships</li>
<li>Having the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment</li>
<li>Having the ability to document testing in a highly detailed and exacting manner</li>
<li>Ability to supervise staff members and word on multiple projects simultaneously</li>
<li>Experience of preparing and delivering presentations</li>
Strong verbal and written communication skills in English, Arabic speaking is Advantageous 
<li>
</li></ul></div>
</div><div></div><div><div><h4 class="jobSectionHeader">Job Details</h4>
<div><div>Job Location</div>
<div>Abu Dhabi, UAE</div>
</div><div><div>Job Role</div>
<div>Business Advisory</div>
</div><div><div>Joining Date</div>
<div>Nov-2025</div>
</div></div><div><h4 class="jobSectionHeader">Preferred Candidate</h4>
<div><div>Career Level</div>
<div>Mid-Management</div></div></div></div></div>

Assistant Manager | IT Audit, Risk Advisory

Majid Al Futtaim

JOB TITLE Senior Manager - Group IT Controls | Holding | Finance ROLE SUMMARY Group IT Controls Sr. Manager will be responsible for developing, implementing, and monitoring IT general controls (ITGCs) and application controls across the holding company and its six operating companies (Opcos). This role will ensure that IT systems and data are secure, compliant, and effectively support internal control and risk management frameworks. ROLE PROFILE <ul> <li>Ensure design and maintenance of a robust IT control framework, covering ITGCs, application controls, and change management processes across all group entities.</li> <li>Identify and review IT-related risks and control gaps in systems, networks, infrastructure, and applications. Recommend and implement appropriate mitigating controls</li> <li>Support internal and external audits by coordinating IT control testing and documentation. Ensure timely resolution of IT audit findings and compliance with regulatory and industry requirements (e.g., SOX, GDPR, local data laws).</li> <li>Work closely with Group IT and business stakeholders to integrate IT controls into key systems, including ERP, financial applications, and operational technology</li> <li>Oversee controls around user access, segregation of duties (SoD), and system changes to protect data integrity and system availability</li> <li>Support the implementation and monitoring of GRC tools or automation solutions to enhance visibility and tracking of IT controls.</li> <li>Track and report on control performance, highlighting key risks, issues, and deviations</li> </ul> REQUIREMENTS <ul> <li>Bachelor's degree in Information Systems, Computer Science, Accounting Information Systems, or related field</li> <li>Minimum 8 years of experience in IT audit, IT risk management, or IT controls, with at least 3-4 years in a lead or management role</li> <li>Strong understanding of ITGCs, application controls, and frameworks</li> <li>Familiarity with ERP systems (e.g., SAP, Oracle Fusion, Microsoft Dynamics) and cloud-based platforms</li> <li>Demonstrated ability to lead cross-functional teams, manage complex projects, and drive organizational change</li> <li>Professional certifications preferred: CISA, CISM, CISSP, or equivalent</li></ul>

Senior Manager - Group IT Controls

DUBAI PROPERTIES GROUP LLC

An opportunity has arisen for an Assistant Manager – Cyber Security, Assurance & Risk to join Dubai Holding Asset Management. The main duties and responsibilities of this role:<ul><li>The role holder is responsible for supporting the implementation and monitoring of information security governance and compliance activities across DHAM and its entities.</li><li>This includes assisting with policy development, audits, awareness initiatives, and governance frameworks to ensure alignment with best practices (e.g., ISO 27001) and business requirements.</li><li>The role focuses on coordinating activities, maintaining documentation, and providing operational support to help strengthen the group’s overall</li></ul>Cybersecurity & Risk Management<ul><li>Support the IT and cybersecurity risk management framework, ensuring alignment with organizational objectives and regulatory requirements.</li><li>Identify, evaluate, and monitor technology-related risks across infrastructure, applications, cloud, and third-party vendors.</li><li>Work with stakeholders to implement mitigation measures, controls, and risk treatment plans.</li><li>Maintain the IT Risk Register, track remediation actions, and escalate risks/issues in line with governance processes.</li><li>Coordinate and conduct periodic risk assessments and workshops with business and IT stakeholders.</li><li>Track and report Key Risk Indicators (KRIs) and prepare risk dashboards and reports for management review.</li></ul>Assurance & Compliance<ul><li>Conduct assurance reviews and internal audits of security controls, IT processes, and regulatory compliance (e.g., ISO 27001, NIST, GDPR, UAE NESA, SCA).</li><li>Support internal and external audit engagements, ensuring timely closure of findings and recommendations.</li><li>Monitor assurance activities such as user access reviews, control checks, and compliance schedules.</li><li>Report on compliance status, exceptions, and remediation plans to management.</li><li>Maintain documentation and evidence to support governance, risk, and compliance (GRC) requirements.</li><li>Liaise with IT/security teams and vendors on incident reporting, documentation, and follow-up.</li></ul>Policy, Governance & Awareness<ul><li>Support the development, review, and enforcement of IT and cybersecurity policies, standards, and procedures.</li><li>Contribute to the implementation and continuous improvement of the IT Governance Framework, aligning with ISO 27001 and other standards.</li><li>Promote security awareness through training, communications, and awareness sessions across all business units.</li><li>Participate in governance and risk forums and support management reporting.</li></ul>Disaster Recovery (DR) & Business Continuity (BCM)<ul><li>Support the development, maintenance, and testing of Disaster Recovery (DR) and Business Continuity (BC) plans.</li><li>Coordinate DR/BC test planning, scheduling, execution, and documentation of results.</li><li>Track corrective actions, ensure remediation, and maintain centralized DR/BC documentation for audits and management reporting.</li></ul>Operational & Project Support<ul><li>Support group-wide information security, governance, and compliance initiatives.</li><li>Assist in managing IT governance and security projects, including coordination with vendors and service providers.</li><li>Gather data to identify gaps, support process improvements, and escalate issues where needed.</li><li>Track and report progress on information security and governance initiatives to senior management.</li></ul>

Assistant Manager – Cyber Security, Assurance & Risk

<div>Job Description
R2
Manager, Risk Analyst BIRO EIT
The Opportunity<ul><li>
Based in Hyderabad, join a global healthcare biopharma company and be part of a 130- year legacy of success backed by ethical integrity, forward momentum, and an inspiring mission to achieve new milestones in global healthcare.</li><li>
Be part of an organisation driven by digital technology and data-backed approaches that support a diversified portfolio of prescription medicines, vaccines, and animal health products.</li><li>
Drive innovation and execution excellence. Be a part of a team with passion for using data, analytics, and insights to drive decision-making, and which creates custom software, allowing us to tackle some of the world's greatest health threats.</li></ul>
Our Technology Centers focus on creating a space where teams can come together to deliver business solutions that save and improve lives. An integral part of our company&rsquo;s IT operating model, Tech Centers are globally distributed locations where each IT division has employees to enable our digital transformation journey and drive business outcomes. These locations, in addition to the other sites, are essential to supporting our business and strategy.
A focused group of leaders in each Tech Center helps to ensure we can manage and improve each location, from investing in growth, success, and well-being of our people, to making sure colleagues from each IT division feel a sense of belonging to managing critical emergencies. And together, we must leverage the strength of our team to collaborate globally to optimize connections and share best practices across the Tech Centers.
Role Overview
Overview The Business Information Risk role supports the alignment of cybersecurity, risk management, and compliance activities with Enterprise business objectives. This role partners with Enterprise teams, business stakeholders, and the Information Technology Risk Management &amp; Security (ITRMS) organization to identify, assess, and mitigate information security and compliance risks across technology. The position acts as a trusted subject-matter expert, translating technical risk into business context and supporting the implementation of practical, risk-based controls that enable safe business operations and innovation.
Primary Responsibilities
Business Partnership &amp; Advisory
<ul><li>Serve as a primary risk advisor to Enterprise teams on assigned programs, products, or technology areas, helping translate security risks into business impact and practical recommendations.</li><li>
Translate enterprise security policies into practical, business-aligned implementation guidance and manage exceptions handling for the business unit.</li><li>
Participate in business planning forums, product roadmaps, and program governance to ensure security is included early (shift-left).</li><li>
Support business stakeholders by providing clear, actionable guidance for embedding security and privacy considerations into projects, digital transformations, and operational processes.</li><li>
Prepare and present risk findings, assessments, and mitigation proposals to IT and business stakeholders; escalate material risks to ITRMS or Enterprise leadership as appropriate.</li></ul>
Risk Assessment &amp; Governance Support
<ul><li>Maintain a prioritized risk register for the business unit and drive risk acceptance decisions with business owners and delegated risk approvers.</li><li>
Conduct and document risk assessments (e.g., application, cloud, third&#8209;party) and gap analyses aligned to Enterprise policies and relevant regulatory requirements.</li><li>
Recommend and help implement risk-based security controls, compensating measures, and remediation plans tailored to Enterprise operational contexts.</li><li>
Assist in maintaining risk registers and tracking remediation and compliance activities; contribute to periodic risk reporting.</li></ul>
Technical Risk Management &amp; cybersecurity<ul><li>
Work closely with Enterprise Value Teams and solution owners to review architecture, design, and operational controls for systems, applications, and cloud environments.</li><li>
Identify opportunities to strengthen cyber resilience (detection, response, recovery) and support implementation of monitoring and control improvements.</li><li>
Support incident investigations and coordination with the Cyber Fusion Center for Enterprise-related security events; help identify root causes and remediation actions.</li></ul>
Program Execution &amp; Standards
<ul><li>Support development and operationalization of security standards, policies, and guidelines relevant to Enterprise.</li><li>
Participate in assurance activities such as control testing, audits, and compliance assessments and support remediation efforts.</li><li>
Stay informed of emerging technologies (e.g., AI, cloud services) and regulatory changes; evaluate their potential security and compliance impacts and escalate concerns.</li></ul>
Stakeholder Engagement &amp; Awareness
<ul><li>Collaborate with risk, technology, and business stakeholders to promote a risk-aware culture and practical security behaviors.</li><li>
Contribute to targeted security awareness initiatives and training for Enterprise teams, tailored to role and business processes.</li><li>
Act as a subject-matter expert in cross-functional working groups or project teams.</li></ul>
Qualifications
Education &amp; Certifications<ul><li>
Bachelor&rsquo;s degree in information technology, cybersecurity, computer science, business administration, or related field (or equivalent experience).</li><li>
Relevant security or risk certifications preferred (CISSP, CISM, CISA, CRISC, GSEC) but not required.</li></ul>
Experience<ul><li>
Experience in cybersecurity, IT risk management, IT compliance, IT audit, or related fields.</li><li>
Experience performing risk assessments and advising technical and business stakeholders on security controls and remediation.</li><li>
Practical experience with cloud, application, or operational technology security is highly desirable.</li><li>
Prior experience supporting regulated industries (healthcare, life sciences, or manufacturing) is preferred but not mandatory.</li></ul>
Skills &amp; Competencies<ul><li>
Technical depth in cybersecurity controls, threats, vulnerabilities, and mitigation strategies across technology.</li><li>
Strong business acumen and ability to explain technical risk in business terms.</li><li>
Proven problem-solving and analytical skills; able to produce clear, actionable recommendations.</li><li>
Good stakeholder management and communication skills; able to influence without formal authority.</li><li>
Comfortable working independently and as part of cross-functional teams; adaptable in a fast-paced environment.</li><li>
High emotional intelligence and collaborative mindset.</li></ul>
Who we are:
We are known as Merck &amp; Co., Inc., Rahway, New Jersey, USA in the United States and Canada and MSD everywhere else. For more than a century, we have been inventing for life, bringing forward medicines and vaccines for many of the world's most challenging diseases. Today, our company continues to be at the forefront of research to deliver innovative health solutions and advance the prevention and treatment of diseases that threaten people and animals around the world.
What we look for:
Imagine getting up in the morning for a job as important as helping to save and improve lives around the world. Here, you have that opportunity. You can put your empathy, creativity, digital mastery, or scientific genius to work in collaboration with a diverse group of colleagues who pursue and bring hope to countless people who are battling some of the most challenging diseases of our time. Our team is constantly evolving, so if you are among the intellectually curious, join us&mdash;and start making your impact today.
Required Skills:
Data Management, Information Security, IT Risk Assessments, IT Risk Governance, IT Risk Response and Reporting, Knowledge of regulations and frameworks, Stakeholder Management, Technical Advice
Preferred Skills:
Current Employees apply HERE
Current Contingent Workers apply HERE
Search Firm Representatives Please Read Carefully 
Merck &amp; Co., Inc., Rahway, NJ, USA, also known as Merck Sharp &amp; Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.
Employee Status:
Regular
Relocation:
VISA Sponsorship:
Travel Requirements:
Flexible Work Arrangements:
Hybrid
Shift:
Valid Driving License:
Hazardous Material(s):
Job Posting End Date:
12/1/2025<ul><li>A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date. 
</li></ul> 
Requisition ID:R372490</div>

Manager, Risk Analyst BIRO EIT

Road and Transport, RTA Dubai

Position OverviewThe IT Governance and Quality Assurance Manager will be responsible for leading the development, monitoring, and enhancement of governance frameworks, policies, and quality standards across RTA s technical systems. The role ensures compliance with international best practices, reduces operational risks, and promotes continuous improvement in IT performance and governance.What You ll Do<ul><li>Monitor technical systems and governance KPIs, identify non-compliance, and recommend corrective actions.</li><li>Audit compliance with ISO 38500 and other international IT governance standards.</li><li>Review and assess project documents for technical quality and adherence to governance policies.</li><li>Lead business continuity, recovery testing, and IT risk management initiatives.</li><li>Provide technical advisory support and conduct awareness sessions for departments.</li><li>Develop executive dashboards and analytical reports for senior management.</li><li>Implement automation tools for testing, reporting, and compliance tracking.</li><li>Enhance IT governance frameworks, policies, and performance indicators.</li><li>Coordinate with Dubai Digital Authority, vendors, and internal stakeholders to ensure alignment.</li><li>Promote innovation, continuous improvement, and cost optimization across IT operations.</li></ul>

IT Governance and Quality Assurance Manager

Search 10000+ It risk manager jobs near you this November. New roles added regularly across leading industries. Apply today.