Senior Manager Operational Risk, IT

ADIB Group; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading bank in the UAE is seeking a Senior Manager - Operational Risk IT to oversee technology risks, conduct IT risk assessments, and ensure compliance with operational frameworks. The ideal candidate will have over 10 years of experience in IT risk within financial institutions and a strong grasp of governance frameworks. This role is pivotal in shaping the bank's technology risk profile and ensuring adherence to regulatory standards.

Qualifications

• 10 years in IT risk, cyber risk or technology related risk function in financial institutions.
• Experience with control frameworks such as NIST CSF, ISO 27001, or COBIT.
• GRC system experience.

Responsibilities

• Oversee and manage Technology related risks across all business units.
• Provide critical challenge to IT risk assessments.
• Monitor technology operational risk incidents and ensure remedies.

Skills

Operational risk frameworks understanding

Islamic banking principles knowledge

Emerging technologies awareness

Analytical skills

Stakeholder management

Tools

NIST CSF

ISO 27001

COBIT

Job description

Description

Role: Senior Manager - Operational Risk IT

Location: Abu Dhabi UAE

Role Purpose:

To provide independent oversight and effective challenge to the technology risk profile across the bank. The role ensures that IT and cyber risks are identified, assessed, monitored and reported in line with the Operational Risk Management Framework and Sharia-compliant banking practices.

Key accountabilities of the role:

• Oversee the identification, assessment and management of all Technology related risks across all business and support units in ADIB in line with banks approved Operational Risk Management Framework.
• Early identification of emerging technological risk such as Artificial Intelligence (AI), machine learning (ML), Digital Assets etc.
• Provide independent and critical challenge to the 1st line (IT Information Security and Digital Banking) on risk assessments, control design and remediation actions.
• Act as GORM SPOC in IT related committees/boards, such as Change Advisory Board, to assess potential risks related but not limited to system changes, cloud adoption, digital transformation and mobile enhancement infrastructure upgrades etc.
• Oversee and ensure the effective implementation and sanity of the banks GRC system.
• Review and challenge technology-related Key Risk Indicators (KRIs), risk acceptances and Risk and Control Self-Assessments (RCSAs).
• Evaluate the effectiveness and design of controls related to Technology risks.
• Monitor technology operational risk and fraud incidents, perform root cause reviews and ensure timely closure of corrective actions.
• Track regulatory and audit issues related to Technology Risks and ensure risk governance is followed in their resolution.
• Contribute to the risk reporting submitted to senior management, Management Risk Committee, Board Risk Committee in addition to ad hoc reporting.
• Support scenario analysis for cyber and IT failure events including business continuity and operational resilience elements.
• Maintain knowledge of UAE regulatory requirements (e.g. CBUAE NESA) and global frameworks (e.g. NIST ISO 27001, COBIT).
• Collaborate with Business Operational Risk Managers (BORMs) and the Compliance IT InfoSec and Internal Audit teams.
• Work on a minimum governance standard for platforms owned by Operational Risk and Fraud Management.

Specialist skills / technical knowledge technical competencies required for this role:

• Strong understanding of operational risk frameworks and governance.
• Broad knowledge of Islamic banking principles and products.
• Broad knowledge of current and emerging technologies, trends and hypes.
• Ability to apply logical and critical thinking.
• Excellent analytical communication and report-writing skills.
• Strong stakeholder management and influencing skills.

Previous experience:

• 10 years in IT risk, cyber risk or technology related risk function in FIs.
• Experience with control frameworks such as NIST CSF (Cyber security), ISO 27001 (information security management) or COBIT (IT governance).
• Experience with GRC system and structure.
• Good knowledge of operational and fraud risks associated with technology and systems.

Required Experience:

Senior Manager