IT COMPLIANCE & RISK

Minds United; Manama; On-site; BHD 50,000 - 80,000; Full time

Job summary

Minds United in Bahrain seeks an IT Compliance & Risk Lead to assess technology/vendor risks, document control issues, and report to IT management.

The role supports establishing a risk management process, developing the risk framework, and collaborating with risk partners to ensure remediation and policy adherence.

Qualifications

• Requires degree in CS or related field with professional IT risk/controls focus.
• Knowledge of IT governance, information security policies, standards and best practices.
• Experience in technology and operational risk frameworks and risk assessments.

Responsibilities

• Supports the establishment of the IT risk management process and maturing the process across IT disciplines.
• Supports development of the technology risk framework, policies, standards, and risk taxonomy.
• Supports implementation and adherence to the risk framework with business-aligned risk partners.
• Evaluates and identifies technology risk across divisions and the enterprise.
• Supports the self and control risk assessment (RCSA) for IT and defines controls, residual risk and remediation.
• Maintains a consolidated enterprise technology risk list and monitors risks and mitigations.
• Implements risk assessments across the enterprise and builds a risk profile.
• Provides credible challenge based on assessment results and ensures risk is mitigated.
• Collaborates with division risk officers to ensure policies and standards are practical and effective.

Skills

IT risk management

Governance & policies

Documentation & reporting

Communication across functions

Risk assessment

Education

Bachelor’s or Master’s degree in computer science or related field

Professional Certifications: COBIT, ITIL, CRISC, ISACA

Job description

Job Purpose

The IT Compliance & Risk Lead is responsible for the assessment of technology/vendor risks and control effectiveness across the IT disciplines. The IT Risk Lead will identify, classify, and document control issues in the bank's environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly reporting to IT management.

Key Accountabilities

• Supports the establishment of the IT risk management process and integration and maturing of the process across the IT disciplines and practices.
• Supports development of the technology risk framework, policies, standards, and risk taxonomy.
• Supports the implementation and adherence to the risk framework, in collaboration and conjunction with business-aligned risk partners.
• Evaluates and identifies technology risk related to divisions and the enterprise, including emerging trends that may impact risk profile.
• Supports the self and control risk assessment (RCSA) for IT and engages with the IT stakeholders to define the controls in place, residual risk and treatment plans.
• Maintains a consolidated list of the technology risk at the enterprise level and ensures continuous monitoring on the risks and corresponding mitigation plans.
• Implements risk assessments across the enterprise and builds an overall profile of the technology risk.
• Provides credible challenge based on risk assessment results and ensures risk is being mitigated.
• Collaborates with division risk officers and subject matter experts to ensure policies and standards are practical, effective and efficient.

Qualifications

• Bachelor’s or master’s degree in computer science or related field.
• Professional Certifications: COBIT, ITIL, CRISC, ISACA.

Experience

6 – 8 Years

Skills

• Minimum 3-5 years of experience in an IT risk and compliance role.
• Solid understanding of IT governance, information security policies, standards and industry best practices.
• Experience in technology and operational risk frameworks.
• Practical experience in scoping, conducting risk assessment, and documenting results.
• Detail oriented and able to meet tight deadlines.
• Excellent documentation skills and ability to communicate effectively across functional areas.