IT COMPLIANCE & RISK

Minds United; Manama; On-site; BHD 30,000 - 45,000; Full time

Job summary

A leading financial institution in Manama seeks an IT Compliance & Risk Lead to oversee technology and vendor risks. This role involves establishing risk management processes, developing frameworks, and evaluating risks. The ideal candidate will have a degree in computer science, relevant certifications, and 6-8 years of experience in IT risk. Strong knowledge of governance and compliance is crucial for success in this position.

Qualifications

• 6 – 8 years of experience in IT risk and compliance.
• Minimum 3-5 years of experience in an IT risk and compliance role.

Responsibilities

• Establish and integrate IT risk management processes.
• Develop technology risk framework, policies, and standards.
• Evaluate technology risks across divisions and enterprise.

Skills

IT risk and compliance experience

IT governance understanding

Information security policies knowledge

Risk assessment experience

Excellent documentation skills

Detail-oriented

Education

Bachelor’s/Master’s degree in computer science or related field

Professional Certifications: COBIT, ITIL, CRISC, ISACA

Job description

Overview

The IT Compliance & Risk Lead is responsible for the assessment of technology/vendor risks and control effectiveness across the IT disciplines. The IT Risk Lead will identify, classify, and document control issues in the bank's environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly report to IT management.

Key Accountabilities

• Supports the establishment of the IT risk management process and integration and maturing the process across the IT disciplines and practices.
• Supports development of the technology risk framework, policies, standards, and risk taxonomy.
• Supports the implementation and adherence to the risk framework, in collaboration and conjunction with business-aligned risk partners.
• Evaluates and identifies technology risk related to divisions and the enterprise, including emerging trends that may impact risk profile.
• Supports the self and control risk assessment (RCSA) for IT and engages with the IT stakeholders to define the controls in place, residual risk and treatment plans.
• Maintains a consolidated list of the technology risk at the enterprise level and ensures continuous monitoring of the risks and corresponding mitigation plans.
• Implements risk assessments across the enterprise and builds an overall profile of the technology risk.
• Provides credible challenge based on risk assessment results and ensures risk is being mitigated.
• Collaborates with division risk officers and subject matter experts to ensure policies and standards are practical, effective and efficient.

Qualifications

• Bachelor’s/Master’s degree in computer science or related field.
• Professional Certifications: COBIT, ITIL, CRISC, ISACA

Experience

6 – 8 Years

Skills

• Minimum 3-5 years of experience in IT risk and compliance role.
• Solid understanding of IT governance, information security policies, standards and industry best practices.
• Experience in technology and operational risks frameworks.
• Practical experience in scoping, conducting risk assessment, and documenting results.
• Detail oriented and able to meet tight deadlines.
• Excellent documentation skills and ability to communicate effectively across functional areas.