Digital Risk Management Engineer

SBM; Jeddah; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology firm in Saudi Arabia is looking for an IT Risk Management professional to conduct comprehensive IT systems reviews and manage risks effectively. The ideal candidate will have a bachelor's degree in IT or a related field, along with strong communication skills in both English and Arabic. Responsibilities include monitoring vulnerabilities, supporting incident responses, and documenting important risk reports. This role requires on-site presence in Jeddah and offers a competitive salary package.

Qualifications

• CISSP, CISA, Security+, GSEC, CRISC certifications preferred.
• Minimum 3–5 years of experience in Risk Management or Information Security.

Responsibilities

• Conduct IT systems reviews to assess risks and provide recommendations.
• Provide assurance of IT control environments' effectiveness.
• Monitor threat indicators and vulnerabilities for timely remediation.
• Support incident response and provide risk progress reports.
• Document and maintain IT risk reports and SOPs.
• Identify critical IT risks and recommend frameworks.
• Participate in IT risk tools implementation.
• Act as focal point for risk reporting and remediation.

Skills

Strong verbal and written communication skills (English & Arabic)

Excellent knowledge of Microsoft Office

Solid knowledge of automated reporting systems & project management

Experience with Key Risk Indicators (KRIs)

Ability to interpret regulations

Strong presentation and teamwork skills

Results-driven and detail-oriented

Education

Bachelor’s degree in Information Technology or equivalent

Job description

Location

Dammam

Education

Bachelor’s degree in Information Technology, IT Security, Computer Information Systems, or equivalent

Experience

Minimum 3–5 years of solid experience in Risk Management, Technology Risk, Information Security, or IT

Monthly Salary Package

10,000 – 25,000 SAR (Max)

Qualifications

Information Assurance Certifications preferred: CISSP, CISA, Security+, GSEC, CRISC, or equivalent

• Strong verbal and written communication skills (English & Arabic)
• Excellent knowledge of Microsoft Office (Word, Excel, PowerPoint), internet, and email
• Solid knowledge of automated reporting systems & project management
• Experience with Key Risk Indicators (KRIs) and Technology Risk reporting preferred
• Ability to interpret regulations and communicate effectively across all levels
• Strong presentation and teamwork skills
• Results-driven and detail-oriented

Language Requirements

English & Arabic

Responsibilities

• Conduct IT systems reviews to identify and assess risks with remediation recommendations
• Provide assurance of effectiveness and efficiency of IT control environments across all IT domains and business areas
• Monitor and follow up on threat indicators, exploits, and vulnerabilities for timely remediation
• Support incident response and provide consolidated IT risk progress reports to managementPrepare consolidated IT risk reports and dashboards for Technology Risk & Committees
• Document and maintain IT risk reports, SOPs, and departmental outputs
• Identify top critical IT risks and recommend frameworks to capture and govern risks
• Review and recommend improvements for IT risk measurement techniques (e.g., RCSAs)
• Act as focal point with ERM, IT Governance & Compliance, Information Security, and IT for risk reporting & remediation
• Participate in IT and digital risk tools / systems implementation with project teams and digital transformation division

Work Pattern

In person

Interview

Remote