IT COMPLIANCE & RISK

RESO; Manama; On-site; BHD 17,500 - 22,500; Full time

Job summary

An established industry player is seeking an IT Compliance & Risk Lead to oversee technology vendor risks and control effectiveness. In this pivotal role, you will assess and document control issues, recommend corrective actions, and engage with stakeholders to ensure adherence to risk frameworks. Your expertise will help shape the technology risk landscape, enabling the organization to navigate emerging trends effectively. Join a collaborative environment where your contributions will significantly impact the overall risk profile and governance strategies. If you have a passion for IT compliance and a keen eye for detail, this is an exciting opportunity to advance your career.

Qualifications

• 6-8 years of experience in IT risk and compliance roles.
• Solid understanding of IT governance and information security policies.

Responsibilities

• Establish and mature IT risk management processes across disciplines.
• Evaluate technology risks and maintain a consolidated risk list.

Skills

IT risk management

IT governance

Information security policies

Risk assessments

Documentation skills

Education

Bachelor’s degree in computer science

Master’s degree in computer science

Tools

COBIT

ITIL

CRISC

ISACA

Job description

Full Time

Job Purpose

The IT Compliance & Risk Lead is responsible for the assessment of technology vendor risks and control effectiveness across the IT disciplines. The IT Risk lead will identify, classify, and document control issues in the bank's environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly reporting to IT management.

Key Accountabilities

1. Supports the establishment of the IT risk management process and integration and maturing of the process across the IT disciplines and practices.
2. Supports development of the technology risk framework, policies, standards, and risk taxonomy.
3. Supports the implementation and adherence to the risk framework, in collaboration and conjunction with business-aligned risk partners.
4. Evaluates and identifies technology risk related to divisions and the enterprise, including emerging trends that may impact risk profile.
5. Supports the self and control risk assessment (RCSA) for IT and engages with the IT stakeholders to define the controls in place, residual risk, and treatment plans.
6. Maintains a consolidated list of the technology risks at the enterprise level and ensures continuous monitoring of the risks and corresponding mitigation plans.
7. Implements risk assessments across the enterprise and builds an overall profile of the technology risk.
8. Provides credible challenge based on risk assessment results and ensures risk is being mitigated.
9. Collaborates with division risk officers and subject matter experts to ensure policies and standards are practical, effective, and efficient.

Qualifications
Bachelor’s/master’s degree in computer science or related field.
Professional Certifications: COBIT, ITIL, CRISC, ISACA.

Experience
6 – 8 Years

Skills

1. Minimum 3-5 years of experience in an IT risk and compliance role.
2. Solid understanding of IT governance, information security policies, standards, and industry best practices.
3. Experience in technology and operational risks frameworks.
4. Practical experience in scoping, conducting risk assessments, and documenting results.
5. Detail-oriented and able to meet tight deadlines.
6. Excellent documentation skills and ability to communicate effectively across functional areas.