Senior Analyst - Technology Risk

edari; Dubai; On-site; AED 300,000 - 420,000; Full time

Job summary

edari is seeking a Senior Analyst - Technology Risk in Dubai to support risk assessments, risk management, mitigation, and continuous improvement for a major client. The contract is 12 months with renewal, requiring hands-on experience in technology risk across large environments and strong stakeholder engagement.

The ideal candidate has 7–10 years total experience, 5–7 years in technology risk, proficiency with GRC tools, and certifications such as CRISC or PRINCE2.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering or a relevant discipline.
• 7–10 years of overall experience, with 5–7 years in technology risk management, IT risk, governance, audit, or related function.
• Hands-on experience conducting technology risk assessments across operational, third‑party, and IT environments.
• Experience managing technology risk registers, mitigation plans, and risk reporting.
• Experience with large-scale technology programmes or projects.
• Experience working with GRC tools and risk management platforms.
• Strong stakeholder management and communication skills for senior stakeholders.
• Proficiency in Microsoft Office, especially Excel and PowerPoint.
• CRISC, CRMP, PRINCE2, PMP, or ITIL certifications preferred.

Responsibilities

• Conduct periodic technology risk assessments across operational, third-party, and technology-related areas.
• Identify, assess, document, and maintain technology risks per cybersecurity and risk management standards.
• Manage and maintain the technology risk register and ensure alignment with enterprise risk management.
• Develop and monitor risk mitigation strategies and actions across Business Technology.
• Work with risk/control owners to track mitigation activities and ensure timely closure.
• Support continuous improvement of the technology risk management program, processes, and practices.
• Contribute to improving technology risk awareness across Business Technology teams.
• Provide technology risk support during incidents, including assessing risk impacts.
• Support technology risk activities across large-scale programmes and initiatives.
• Prepare risk reports and updates for senior stakeholders.
• Collaborate with technology, cybersecurity, business, and other stakeholders to address risks effectively.

Skills

Technology risk management

Risk assessments

Risk registers

Mitigation activities

GRC tools

Stakeholder management

MS Office (Excel, PowerPoint)

Communication skills

CRISC / PRINCE2 / PMP / ITIL

Education

Bachelor’s degree in IT / CS / Engineering

Tools

GRC tools

Job description

We are looking to hire a Senior Analyst - Technology Risk who will be responsible for supporting technology risk assessments, risk management, mitigation, and continuous improvement activities across the organization for our client based in Dubai, which is one of the largest semi-government organizations in the region.

This position is a contract role with an initial duration of 12 months and is renewable.

We are looking for a technology risk professional with strong experience in technology risk management, risk assessments, risk registers, and mitigation activities. The ideal candidate will have hands-on experience managing technology risks across large-scale technology environments or programmes, supporting risk mitigation, and working closely with technology and business stakeholders to strengthen the overall technology risk management framework.

Key responsibilities:

• Conduct periodic technology risk assessments across operational, third-party, and technology-related areas within Business Technology.
• Identify, assess, document, and maintain technology risks in accordance with established cybersecurity and risk management standards.
• Manage and maintain the technology risk register, ensuring alignment with the enterprise risk management programme.
• Ensure technology risks and risk registers are appropriately documented, maintained, and securely stored in line with relevant policies and standards.
• Develop and monitor risk mitigation strategies and actions for risks across Business Technology.
• Work with risk and control owners to track mitigation activities and ensure timely closure of identified risks.
• Support the continuous improvement of the technology risk management programme, processes, and practices.
• Contribute to improving technology risk awareness and knowledge across Business Technology teams.
• Provide technology risk support during technology and cybersecurity incidents, including assessing and communicating potential risk impacts.
• Support technology risk management activities across large-scale technology programmes and initiatives.
• Prepare risk reports, management updates, and relevant analysis for senior stakeholders.
• Collaborate with technology, cybersecurity, business, and other relevant stakeholders to identify and address technology risks effectively.
• Bachelor’s degree in Information Technology, Computer Science, Engineering, or a relevant discipline.
• 7-10 years of overall experience, with 5-7 years of relevant experience in technology risk management, IT risk, technology governance, IT audit, or a related function.
• Hands-on experience conducting and managing technology risk assessments across operational, third-party, and technology environments.
• Experience managing technology risk registers, risk mitigation plans, and risk reporting.
• Experience managing and assessing technology risks within large-scale technology programmes or projects.
• Experience working with GRC tools and technology risk management platforms.
• Strong stakeholder management and communication skills, with the ability to engage and influence senior stakeholders.
• Proficiency in Microsoft Office applications, particularly Excel, PowerPoint, and related reporting tools.
• Professional certifications such as CRISC, CRMP, PRINCE2, PMP, or ITIL will be highly preferred.

Availability:

• Preference will be given to candidates who are immediately available or on short notice (30 days or less).