Digital Risk Management Engineer

Saudi Business Machines; Dammam; On-site; SAR 111,600 - 279,000; Full time

Job summary

A technology firm in Dammam is seeking a Digital Risk Management Engineer to lead IT systems reviews and ensure effective risk management across business areas. The ideal candidate holds a Bachelor’s degree in IT fields and has 3–5 years of relevant experience. Communication skills in both English and Arabic are essential, along with knowledge of risk reporting and assurance of IT controls. Competitive salary range of 10,000 – 25,000 SAR offered.

Responsibilities

• Conduct IT systems reviews to identify and assess risks.
• Provide assurance of effectiveness of IT control environments.
• Monitor threat indicators for timely remediation.
• Support incident response and provide IT risk progress reports.
• Prepare consolidated IT risk reports and dashboards.
• Document and maintain IT risk reports and SOPs.
• Identify top critical IT risks and recommend frameworks.
• Review and recommend improvements for IT risk measurement techniques.
• Act as focal point for risk reporting and remediation.
• Participate in IT and digital risk tools implementation.

Skills

Information Assurance Certifications (CISSP, CISA, Security+, GSEC, CRISC)

Strong verbal and written communication skills (English & Arabic)

Knowledge of Microsoft Office

Knowledge of automated reporting systems

Experience with Key Risk Indicators (KRIs)

Ability to interpret regulations

Strong presentation and teamwork skills

Results-driven and detail-oriented

Education

Bachelor’s degree in Information Technology, IT Security, Computer Information Systems, or equivalent

Job description

Overview

Position Title: Digital Risk Management Engineer
Location: Dammam
Education: Bachelor’s degree in Information Technology, IT Security, Computer Information Systems, or equivalent
Experience: Minimum 3–5 years of solid experience in Risk Management, Technology Risk, Information Security, or IT
Monthly Salary Package: 10,000 – 25,000 SAR (Max)

Qualifications

• Information Assurance Certifications preferred: CISSP, CISA, Security+, GSEC, CRISC, or equivalent
• Strong verbal and written communication skills (English & Arabic)
• Excellent knowledge of Microsoft Office (Word, Excel, PowerPoint), internet, and email
• Solid knowledge of automated reporting systems & project management
• Experience with Key Risk Indicators (KRIs) and Technology Risk reporting preferred
• Ability to interpret regulations and communicate effectively across all levels
• Strong presentation and teamwork skills
• Results-driven and detail-oriented

Responsibilities

• Conduct IT systems reviews to identify and assess risks with remediation recommendations
• Provide assurance of effectiveness and efficiency of IT control environments across all IT domains and business areas
• Monitor and follow up on threat indicators, exploits, and vulnerabilities for timely remediation
• Support incident response and provide consolidated IT risk progress reports to management
• Prepare consolidated IT risk reports and dashboards for Technology Risk & Committees
• Document and maintain IT risk reports, SOPs, and departmental outputs
• Identify top critical IT risks and recommend frameworks to capture and govern risks
• Review and recommend improvements for IT risk measurement techniques (e.g., RCSAs)
• Act as focal point with ERM, IT Governance & Compliance, Information Security, and IT for risk reporting & remediation
• Participate in IT and digital risk tools/systems implementation with project teams and digital transformation division