risk management lead

Galfar

<div><div><h3 class="jobSectionHeader"><b>Job Information</b></h3>
<ul><div><p>Units</p>
<div>Corporate Support
</div></div><div><p>Date Opened</p>
<div>03/29/2026
</div></div><div><p>Job Type</p>
<div>Full time
</div></div><div><p>Salary</p>
<div>Salary and benefits will be at par with the industry
</div></div><div><p>Minimum Work Experience in Years</p>
<div>14
</div></div><div><p>Qualification</p>
<div>Bachelor&rsquo;s Degree
</div></div><div><p>Industry</p>
<div>Construction / Engineering / Infrastructure / Cement / Metal
</div></div><div><p>City</p>
<div>Muscat
</div></div><div><p>State/Province</p>
<div>Muscat
</div></div><div><p>Country</p>
<div>Sultanate of Oman
</div></div><div><p>Zip/Postal Code</p>
<div>0000
</div></div></ul></div><div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><ul><li>Lead the development and continuous enhancement of the Enterprise Risk Management (ERM) framework<br>
</li><li>
Identify and assess strategic, financial, operational, regulatory, and reputational risks, and recommend mitigation actions<br>
</li><li>
Facilitate risk workshops with senior leadership to ensure proper identification and documentation of risks<br>
</li><li>
Maintain and regularly update the corporate risk register and Key Risk Indicators (KRIs)<br>
</li><li>
Monitor emerging risks and provide insights on risk trends across the organization<br>
</li><li>
Collaborate with business units to design and implement effective risk mitigation plans<br>
</li><li>
Track the execution of mitigation actions and escalate any gaps or non-compliance<br>
</li><li>
Provide assurance to executive management and Board committees on risk control effectiveness<br>
</li><li>
Oversee risk governance and ensure compliance with internal policies and regulatory requirements<br>
</li><li>
Conduct compliance reviews, gap assessments, and monitor regulatory developments<br>
</li><li>
Embed risk management practices into strategic planning, budgeting, and key business decisions<br>
</li><li>
Promote a strong risk-aware culture across all levels of the organization<br>
</li><li>
Define risk appetite and develop meaningful KRIs and reporting frameworks<br>
</li><li>
Prepare clear and insightful risk reports and dashboards for the CEO and Board<br>
</li><li>
Act as the central point of contact for all risk-related matters<br>
</li><li>
Advise senior leadership on risk implications of strategic and operational initiatives</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Requirements</b></h3><h3 class="jobSectionHeader"><b>
Qualifications &amp; Experience</b><br>
</h3><ul><li>
Bachelor&rsquo;s degree in Risk Management, Finance, Engineering, Law, Business Administration, or a related field from a recognized university<br>
</li><li>
Master&rsquo;s degree is preferred<br>
</li><li>
14&ndash;18 years of relevant experience in enterprise risk management, governance, or compliance<br>
</li><li>
Minimum 5&ndash;8 years in a senior leadership role<br>
</li><li>
Strong knowledge of risk management frameworks, regulatory requirements, and governance practices<br>
</li><li>
Experience in engineering and construction environments is highly preferred</li></ul><div></div><div><b><br>
Core Competencies</b><br>
</div><ul><li>
Regulatory &amp; Compliance Expertise<br>
</li><li>
Risk Mitigation Planning<br>
</li><li>
Strategic Decision-Making<br>
</li><li>
Strong Business Acumen<br>
</li><li>
Stakeholder Management, Influence &amp; Collaboration<br>
</li><li>
Critical Thinking &amp; Problem Solving</li></ul></div></div></div><p></p>

Corporate Risk Officer

Deloitte

<div>
 <strong>
  About Deloitte
 </strong>
 : When you work for us, you commit to a career at one of the largest and most prestigious professional services firms in the world. We have received numerous awards over the last few years, including best Employer in the Middle East, best Consulting Firm, and the Middle East Training &amp; Development Excellence Award.
 <br/>
 <br/>
 <strong>
  Our Purpose
  <br/>
  <br/>
 </strong>
 Deloitte makes an impact that matters. Every day we challenge ourselves to do what matters most&mdash;for clients, for our people, and for society. We serve clients distinctively, bringing innovative insights, solving complex challenges and unlocking sustainable growth. We inspire our talented professionals to deliver outstanding value to clients, providing an exceptional career experience and an inclusive and collaborative culture. We contribute to society, building confidence and trust in the markets, upholding the integrity of organizations and supporting our communities.
 <br/>
 <br/>
 Our shared values guide the way we behave to make a positive, enduring impact:
 <br/>
 <br/>
 <ul>
  <li>
   Lead the way
  </li>
  <li>
   Serve with integrity
  </li>
  <li>
   Take care of each other
  </li>
  <li>
   Foster inclusion
  </li>
  <li>
   Collaborate for measurable impact
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Manage Risks within Client/Engagements / Ensure compliance to professional, Legal &amp; Internal standards.
  </li>
  <li>
   Lead implementation projects on matters related to the Firm&rsquo;s policies &amp; procedures. Establish Risk controls and implement appropriate safeguards.
  </li>
  <li>
   Drive continuous improvement withing the team to maximise operational efficiency.
  </li>
  <li>
   Key reference for managing day-to-day operational tasks to support Engagement teams &amp; Enabling functions.
  </li>
  <li>
   Identify, Assess and Mitigate potential Risks related to engagements.
  </li>
  <li>
   Update our internal Manual on matters related to Quality management.
  </li>
  <li>
   Manage Consultations within different teams and coordinate with related subject experts.
  </li>
  <li>
   Provide consultations on risk management issues to tax professionals.
  </li>
  <li>
   Planning, testing &amp; Monitoring Key processes to evaluate quality and adherence to Risk management policies.
  </li>
  <li>
   Give guidance and support within the team while always raising awareness and compliance for best practices.
  </li>
  <li>
   Support the Business Risk Leader on matters related to Risk Management.
  </li>
  <li>
   Monitor compliance with laws and regulations in the Middle East and assess impact on key operational procedures.
  </li>
  <li>
   Manage communications on risk management matters.
  </li>
  <li>
   Develop and engage in training sessions for different stakeholders.
  </li>
  <li>
   Ad hoc tasks.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Leadership Capabilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Builds own understanding of our purpose and values; explores opportunities for impact.
  </li>
  <li>
   Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.
  </li>
  <li>
   Understands expectations and demonstrates personal accountability for keeping performance on track.
  </li>
  <li>
   Actively focuses on developing effective communication and relationship-building skills.
  </li>
  <li>
   Understands priorities of the team and the business.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   7+ years of experience with Big 4 accountancy firms, preferably in a finance operations department.
  </li>
  <li>
   Experience in risk management roles/projects within a Big 4 accountancy firm is a plus.
  </li>
  <li>
   Bachelor&rsquo;s degree in finance, Management, Business, or Risk Management.
  </li>
  <li>
   Master&rsquo;s degree or any relevant professional qualification is preferred.
  </li>
  <li>
   Ability to communicate clearly and write logically and articulately in good business English.
  </li>
  <li>
   Technology oriented.
  </li>
 </ul>
</div>


T&L QRM Assistant Manager/Manager | Quality, Risk and Security | Egypt

Qatar National Bank

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Risk Management
</div></li><li><div><b>Department</b>
</div><div>Risk Management
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for driving the strategic direction of the organization's risk management practices for Merchant Risk (Acquiring). The role will work closely with the executive leadership team, risk management teams, and key stakeholders to establish a comprehensive risk management framework that balances financial stability, compliance, and innovation.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Serve as a trusted advisor to the executive leadership team, providing strategic guidance on risk management issues and initiatives. - Lead the development and implementation of a comprehensive risk management strategy that aligns with the organization's overall business goals and objectives. - Foster a culture of risk management and awareness, promoting the integration of risk management practices into all aspects of the organization's operations. - Monitor and report on the performance of risk management practices and systems, making recommendations for improvements and driving the implementation of best practices. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance. - Implements KPI&rsquo;s and best practices for Merchant Risk (Acquiring).
</p><p>B. Customer (Internal &amp; External): - Establish and maintain strong relationships with key internal and external stakeholders, including merchants, issuers, regulators, and industry partners. - Ensure that customer needs and expectations are considered in the development and implementation of risk management strategies. - Lead the development and implementation of effective communication and engagement strategies to educate customers, stakeholders, and industry partners on risk management practices and procedures. - Provide expert guidance and support to customers and stakeholders on risk management issues and initiatives. - Liaise with domestic Group divisions, departments, zone and branch management, and International branches and subsidiaries in identifying potential fraud risk exposure within existing systems, procedures and people, with end objective to minimize, prevent and remediate any losses incurred to the customer. (Fraud Risk Self Assessment process linked to OpRisk RCSA&rsquo;s). - Support relevant Group divisions / departments in maintaining and enhancing procedural knowledge and card network compliance of fraud-reporting and chargeback processing requirements. - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives. - Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required.
</p><p>C. Internal (Processes, Products, Regulatory): - Oversee successful implementation and maintenance of end-to-end Fraud Risk Self-Assessment process, including roll-out scheduling, response review and control gap identification, working in close unison with Head of Risk Control Self-Assessment (RCSA). - Ensure timely, effective and complete resolution of internal audit points, through effective co-ordination between relevant Fraud Risk functions and other internal entities &ndash; i.e. Group ITD, Group Operations etc.... - Coordinate with Retail processing departments to establish sound knowledge and best practice of card-network chargeback rules in order to best protect cardholders and the Bank pertaining to liability rights and re-presentment opportunity.- Coordinate with Compliance function on the overall fraud risk awareness training for Group-wide divisions &amp; departments, and maintain training content as appropriate for specific audience level (management, general staff etc&hellip;). - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues. - Lead the development and implementation of processes and systems to identify and assess risk in card and merchant services. - Ensure that risk management practices and systems are integrated into product development processes and are consistent with regulatory requirements. - Oversee the development and implementation of risk management training and awareness programs, promoting a culture of risk management and awareness. - Conduct regular assessments of risk management practices and system.</p><p>
D. Learning &amp; Knowledge: - Possess a good knowledge of the risk involved in all card products (credit/debit/prepaid/contactless) and merchant payment channels (POS, eCommerce, MO/TO &hellip;) and good knowledge of related operations, controls and regulatory framework. - Identify areas for professional development of self. - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Work closely with external customers and internal teams providing oversight, guidance in relation to Merchant Acquiring Risk.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>University Bachelor&rsquo;s Degree graduate preferably with a Major in Marketing, Banking, Finance, Accounting, Economics, Business Administration or Information Technology (related field of study).
</li><li>At least 12 years of relevant experience, preferably within a highly rated international bank or regulatory agency, of which at least 5 years should be in a managerial/ supervisory role.</li></ul>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate</li></ul></div></div></div></div></div><div></div>

Vice President Merchant Risk

JPMorganChase

<div><b>JOB DESCRIPTION</b><br>
<br>
Join our dynamic team to navigate complex risk landscapes and fortify technology governance, making a pivotal impact in our firm&rsquo;s robust risk strategy.<br>
<br>
As a <b>Compliance and Operations Risk Test Lead</b> in the Testing Center of Excellence, you will play a pivotal role in enhancing our compliance and operational risk management. Your expertise in test execution will be crucial in managing and conducting precise and accountable tests, ensuring alignment with the firm's highest risks. Your analytical thinking and problem-solving skills will be key in identifying control coverage gaps and driving remediation of control issues. You will also be responsible for planning and organizing your own work, and potentially that of a team, while liaising and coordinating activities across various departments. Your role will be integral in ensuring a cohesive and efficient testing framework, contributing to the seamless delivery of quality outcomes.<br>
<br>
<b>Job responsibilities
</b><div><ul><li>Conduct comprehensive testing processes, ensuring all activities are completed accurately and on time, while adhering to the firm's highest risk priorities.</li>
<li>Utilize advanced analytical thinking to identify control coverage gaps and verify that controls are properly designed and implemented.</li>
<li>Apply problem-solving skills to address complex situations, develop alternate solutions, and interpret policies to ensure compliance with technical standards.</li>
<li>Collaborate with cross-functional teams to align testing efforts and maintain open communication with stakeholders, ensuring effective execution of tasks.</li>
<li>Continuously improve control evaluation methods and interpret control ratings and metrics to enhance the firm's compliance and operational risk management.</li>
</ul></div><div><b>Required qualifications, capabilities, and skills</b></div><div>
<ul><li>3+ years of experience in executing and managing testing processes within a professional or specialized field.</li>
<li>Demonstrated proficiency in analytical thinking, with a track record of systematically organizing, comparing, and evaluating various aspects of a situation to identify key information.</li>
<li>Proven ability to perform assessments of the control environment, identifying control coverage gaps and verifying the proper design and implementation of controls.</li>
<li>Experience in coordinating activities across multiple departments, with the ability to adapt to changing priorities and manage a team if required.</li>
<li>Proficiency in utilizing Project Management methodologies, tools, and techniques to lead and manage aspects of the project management lifecycle.</li>
</ul></div><b>ABOUT US</b><br>
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><p></p><div><p>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
</p><div><p>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.</p>
<p>JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans</p><br>
</div></div></div><br>
<br>
<b>ABOUT THE TEAM</b><br>
<div>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div><div><br>
<br>
</div><div>Control Management maintains a strong and consistent control environment through a joint accountability model that aligns managers with each function and region to mitigate operational risk. The team focuses on four areas: Control Design &amp; Expertise, Risks &amp; Controls Identification/Assessment, Issues &amp; Control Deficiencies and Control Governance &amp; Reporting.</div></div>

Compliance and Ops Risk Test Lead - Associate

Akima

<div>Company Overview:<p></p><p><b><br>
Work Where it Matters</b></p><p>
Akima Global Technology (AGT), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.
</p><p>At AGT, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.
</p><p><b>For our shareholders</b>, AGT provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</p><p><b>
For our government customers</b>, AGT delivers new technologies and partners with leading edge commercial enterprises to deliver unique and innovative IT solutions.</p><p><b>
As an AGT employee</b>, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</p>
Description:
<div>
Akima is seeking a highly experienced and mission‑focused Senior A&amp;A Support Lead to oversee all Assessment &amp; Authorization (A&amp;A) activities across the organization&rsquo;s cybersecurity portfolio. In this senior role, the Lead will guide the execution of the Risk Management Framework (RMF), ensure the accuracy and completeness of security documentation, and drive system accreditation efforts from initiation through continuous monitoring.</div><div><br>
</div><div>The ideal candidate will serve as the Subject Mater Expert (SME) on A&amp;A processes, collaborating closely with system owners, engineers, ISSOs, and leadership to ensure that Military Sealift Command&rsquo;s (MSC) systems meet all federal, DoD, and organizational cybersecurity requirements.</div>
Responsibilities:
<ul><li>Lead and manage all Assessment &amp; Authorization activities, ensuring systems achieve and maintain Authority to Operate (ATO) in alignment with NIST, FISMA, DoD, and organizational cybersecurity frameworks.</li><li>
Oversee the development, review, and maintenance of RMF documentation, including SSPs, SARs, POA&amp;Ms, and all associated artifacts.</li><li>
Establish and enforce A&amp;A processes, templates, and quality standards to ensure consistency, accuracy, and audit readiness across all systems.</li><li>
Direct comprehensive security control assessments, ensuring findings are documented, validated, and remediated in accordance with mission and compliance requirements.</li><li>
Coordinate internal and external audits, inspections, and assessments, ensuring full transparency, timely responses, and closure of corrective actions.</li><li>
Provide expert guidance on security control inheritance, boundary definitions, and system categorizations to ensure proper alignment with RMF requirements.</li><li>
Serve as the senior subject matter expert for all A&amp;A‑related activities, advising leadership and technical teams on compliance strategies, risk mitigation, and accreditation pathways.</li><li>
Collaborate with system administrators, engineers, and developers to validate control implementation, troubleshoot gaps, and ensure technical accuracy of security documentation.</li><li>
Review system architecture, configurations, and security controls to ensure alignment with accreditation requirements and best practices.</li><li>
Act as the primary liaison with Authorizing Officials (AOs), Security Control Assessors (SCAs), and other oversight bodies, ensuring clear communication and alignment throughout the A&amp;A lifecycle.</li><li>
Provide regular updates, briefings, and recommendations to leadership on accreditation status, risks, and program‑level trends.</li><li>
Support cross‑functional teams by translating complex security requirements into actionable guidance.</li><li>
Lead continuous monitoring activities, ensuring timely updates to security documentation, ongoing control assessments, and proactive risk identification.</li><li>
Track and manage POA&amp;M items, ensuring accurate reporting, prioritization, and closure.</li><li>
Evaluate emerging policies, technologies, and threat trends, recommending improvements to strengthen the organization&rsquo;s compliance posture and accreditation efficiency.</li><li>
Mentor junior cybersecurity staff, fostering a culture of quality, accountability, and continuous improvement.</li></ul><div>
This role is based out of Norfolk, VA, and provides support to Ashore and Afloat cybersecurity operations as required for Cybersecurity Risk Management and A&amp;A services to MSC. This role is critical in ensuring the confidentiality, integrity, and availability of MSC&rsquo;s systems and data while enabling mission success through secure and compliant system operations.</div>
Qualifications:
<ul><li>An Active SECRET clearance is required for consideration.</li><li>
Bachelor's degree with at least 10 years of relevant experience required; or greater than 15 years of relevant experience required in lieu of degree is required.
</li><li>IAM III level Certification such as CEH, CGRC, CASP+ CE, CISM is required; IAT III level certification is preferred.</li><li>
Enterprise Mission Assurance Support Services (eMASS) experience is preferred.</li><li>
Vulnerability Remediation Asset Manager (VRAM) experience preferred.</li></ul>
Job ID: 2026-22834 Work Type: On-Site</div>

Senior Accreditation & Authorization Support - Lead

بنك التعمير والإسكان HD Bank

<div>
 <p>
  <strong>
   <em>
    <u>
     Job Summary:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The
  <strong>
   IT Risk Management Unit Manager
  </strong>
  is responsible for
  <strong>
   identifying, assessing, mitigating, and monitoring IT-related risks
  </strong>
  within the organization. This role ensures that the bank's IT systems, infrastructure, and operations comply with
  <strong>
   risk management frameworks, regulatory requirements, and cybersecurity best practices
  </strong>
  to safeguard the organization from potential threats.
 </p>
 <p>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Responsibilities:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Develop and enforce IT asset management policies and procedures.
  </li>
  <li>
   Conduct risk assessments to identify cybersecurity threats, operational vulnerabilities, and compliance gaps.
  </li>
  <li>
   Evaluate IT systems, applications, and processes to determine risk exposure and impact.
  </li>
  <li>
   Develop and maintain an IT risk register, tracking identified risks and their mitigation measures.
  </li>
  <li>
   Develop and implement IT risk management strategies and frameworks to minimize operational risks.
  </li>
  <li>
   Recommend security controls, technology enhancements, and process improvements to reduce IT risk exposure.
  </li>
  <li>
   Ensure disaster recovery (DR) and business continuity (BCP) plans are in place and tested regularly.
  </li>
  <li>
   Ensure IT risk management practices align with regulatory standards (e.g., GDPR, PCI DSS, ISO 27001, NIST, COBIT).
  </li>
  <li>
   Collaborate with internal and external auditors to address compliance requirements and risk assessments.
  </li>
  <li>
   Stay updated on IT risk regulatory changes and ensure necessary adjustments to risk management policies.
  </li>
  <li>
   Develop and oversee the IT incident response plan, ensuring swift and effective resolution of IT security incidents.
  </li>
  <li>
   Work with IT security teams to analyze and report security breaches, cyber threats, and system failures.
  </li>
  <li>
   Conduct post-incident evaluations to identify root causes and implement preventive measures.
  </li>
  <li>
   Work closely with senior IT leaders, cybersecurity teams, compliance officers, and risk managers to integrate IT risk management into business operations.
  </li>
  <li>
   Provide risk advisory and training to IT and business teams to enhance risk awareness.
  </li>
  <li>
   Act as the primary liaison for regulatory bodies, auditors, and external service providers regarding IT risk-related matters.
  </li>
  <li>
   Prepare and present IT risk reports, risk dashboards, and compliance updates to senior management and regulatory authorities.
  </li>
  <li>
   Maintain comprehensive documentation of risk management policies, procedures, and assessments.
  </li>
  <li>
   Conduct periodic risk reviews and IT audits to ensure alignment with best practices.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Qualifications:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
  </li>
  <li>
   <strong>
    Minimum 8+ years
   </strong>
   of experience in
   <strong>
    IT risk management, cybersecurity, or IT governance
   </strong>
   .
  </li>
  <li>
   Strong background in
   <strong>
    IT compliance, security frameworks, and enterprise risk management
   </strong>
   .
  </li>
  <li>
   Experience in
   <strong>
    managing IT risk programs, conducting IT risk assessments, and collaborating with auditors
   </strong>
   .
  </li>
 </ul>
 <p>
 </p>
</div>


IT Risk Management Unit Manager

Bank Alfalah Limited

<div>
 <p>
  Job Purpose:
 </p>
 <p>
  The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 </p>
 <p>
  <br/>
 </p>
 <p>
  Responsibilities:
 </p>
 <ul>
  <li>
   Support the execution of internal and external information security audits in collaboration with the Team lead.
  </li>
  <li>
   Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
  </li>
  <li>
   Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
  </li>
  <li>
   Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
  </li>
  <li>
   Maintain and oversee the information security risk register.
  </li>
  <li>
   Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
  </li>
  <li>
   Coordinate with IT/security teams for mitigation strategies.
  </li>
  <li>
   Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
  </li>
  <li>
   Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
  </li>
  <li>
   Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
  </li>
  <li>
   Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
  </li>
  <li>
   Oversee cyber security and information security (NESA Compliance) programs.
  </li>
  <li>
   Lead risk assessments and ensure compliance of vendors with security requirements
  </li>
  <li>
   Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
  </li>
  <li>
   Lead, and manage the IS GRC team in absence of Team Lead
  </li>
  <li>
   Manage risk acceptance process and ensure proper approval from the management
  </li>
  <li>
   Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
  </li>
  <li>
   Coordinate and manage regulatory inspections and ensure timely closure of observations
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Manager Information Security

Search 10000+ Risk management lead jobs near you this May. New roles added regularly across leading industries. Apply today.