IT Risk Assessor – AI, Systems Integration, Technology Risk & Compliance

Socium - Teams Done Differently; Abu Dhabi; On-site; AED 1,200,000 - 1,800,000; Full time

Job summary

Socium - Teams Done Differently in Abu Dhabi, UAE is seeking a Senior IT Risk Consultant to lead risk assessments across enterprise environments, including AI/ML and integrations. The role requires onsite work at the client's office and close collaboration with Cybersecurity, AI/ML Engineering, and Compliance teams.

You will evaluate governance frameworks, model risk, data privacy, and third‑party risks, and prepare risk reports, risk registers, and remediation strategies.

Qualifications

• Proven experience conducting IT risk assessments and risk evaluations.
• Strong knowledge of AI/ML risks and governance.
• Experience with IT risk frameworks (ISO 27001, NIST CSF, COBIT).
• Excellent stakeholder management and reporting skills.

Responsibilities

• Conduct comprehensive IT risk assessments across enterprise environments.
• Identify and document technology risks related to AI/ML and integrations.
• Assess AI governance, data privacy, security controls, and regulatory compliance.
• Review architecture, data flows, APIs, and cloud services for vulnerabilities.
• Support GRC activities, risk assessments, control testing and audit readiness.
• Collaborate with IT, Cybersecurity, Risk, and Compliance teams.

Skills

IT risk assessment

AI risk

GRC frameworks

Regulatory compliance

Stakeholder management

Security controls

Vendor risk

Cloud security

Education

CISA

CRISC

CISM

Job description

Location: Abu Dhabi, UAE – Full Onsite

Work Schedule: Full onsite at the client's office

Seniority Level: Consultant / Senior Consultant

Key Responsibilities

• Conduct comprehensive IT risk assessments across enterprise technology environments, IT infrastructure, applications, systems integrations, and AI-driven solutions.
• Identify, analyze, evaluate, and document technology risks related to Artificial Intelligence (AI), Machine Learning (ML), system integrations, cybersecurity, data protection, and enterprise IT operations.
• Assess risks associated with AI-powered applications, AI/ML models, automated decision‑making systems, and emerging technologies.
• Evaluate security, operational, and compliance risks arising from system integrations, APIs, third‑party platforms, cloud services, and interconnected enterprise applications.
• Review IT architecture, system designs, data flows, integration frameworks, and technical controls to identify potential vulnerabilities, security gaps, and operational risks.
• Perform IT risk and control assessments, identify control weaknesses, and recommend appropriate risk mitigation and remediation strategies.
• Assess AI governance, model risk management, data privacy, security controls, and responsible AI practices in accordance with relevant industry standards.
• Evaluate IT systems and technology processes against applicable regulatory requirements, internal policies, and recognized IT risk management frameworks.
• Support IT governance, risk, and compliance (GRC) activities, including risk assessments, control testing, compliance reviews, and audit readiness.
• Collaborate closely with IT, Cybersecurity, AI/ML Engineering, Enterprise Architecture, Risk Management, and Compliance teams to assess technology‑related risks.
• Review third‑party technology solutions, vendor integrations, and external service providers to identify security, compliance, and operational risks.
• Prepare detailed IT risk assessment reports, risk registers, control gap analyses, remediation recommendations, and management presentations.
• Monitor risk remediation activities, track identified issues, and support continuous improvement of IT risk management and compliance processes.

Experience & Professional Qualifications

• Proven experience as an IT Risk Assessor, IT Risk Consultant, Technology Risk Consultant, IT Risk & Compliance Specialist, or IT GRC Consultant, preferably at Consultant or Senior Consultant level.
• Strong combination of technical IT knowledge and IT risk management, governance, and regulatory compliance expertise.
• Demonstrated experience conducting IT risk assessments, technology risk evaluations, security control reviews, and compliance assessments.
• Strong understanding of Artificial Intelligence (AI), Machine Learning (ML), AI‑powered applications, and associated technology risks.
• Practical experience assessing risks related to systems integration, APIs, enterprise applications, cloud platforms, and interconnected IT environments.
• Good understanding of AI governance, AI model risks, data privacy, information security, and emerging AI‑related regulatory requirements.
• Familiarity with relevant IT risk, cybersecurity, and governance frameworks, including:
• ISO 27001 / ISO 27005 – Information Security & Risk Management
• NIST Cybersecurity Framework (CSF)
• NIST AI Risk Management Framework (AI RMF)
• ISO/IEC 42001 – Artificial Intelligence Management Systems
• COBIT – IT Governance & Risk Management
• ISO 31000 – Enterprise Risk Management
• Knowledge of IT General Controls (ITGC), risk and control assessments (RCSA), security assessments, and regulatory compliance requirements.
• Understanding of enterprise IT architecture, cloud security, application security, identity and access management, data protection, and third‑party technology risks.
• Experience identifying technology control gaps, evaluating risk exposure, and recommending practical remediation and mitigation measures.
• Ability to translate complex technical risks into clear business impact assessments, risk reports, and actionable recommendations.
• Experience working with cross‑functional technical, risk, compliance, and business stakeholders.
• Strong analytical, problem‑solving, documentation, reporting, and stakeholder management skills.
• Previous experience in consulting, enterprise IT risk management, financial services, or other regulated industries is advantageous.
• Relevant certifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent are advantageous.