Senior System Risk Officer

Saudi Networkers Services (SNS Group); Riyadh; Presencial; SAR 240.000 - 340.000; Tempo integral

Resumo da vaga

Saudi Networkers Services (SNS Group) is seeking an IT risk professional to assist in developing and implementing an IT Risk Management Framework within the banking sector. The role requires strong knowledge of risk assessment, controls testing, and vendor risk review, with certifications like CRISC, CISM, CISSP, or CISA considered a plus.

The candidate will analyze information technology risks across operations, propose action plans, and ensure timely mitigation.

Qualificações

• Hands-on experience applying the Technology Risk & Control framework.

Responsabilidades

• Assist the systems risk unit manager in developing and implementing the IT Risk Management Framework.

Conhecimentos

Technology Risk & Control framework

Risk assessments

Banking industry knowledge

IT Asset classification

COSO/ISO/ISACA IT Risk Management

IT/Business degree

CRISC/CISM/CISSP/CISA certifications

Analytical thinking

Vendor risk reviews

Formação

IT/Business degree

CRISC

CISM

CISSP

CISA

Ferramentas

T24 core banking

COSO framework

ISACA IT Risk Management

ISO standards

Descrição da vaga

Principal Duties and Responsibilities:

• 1- Assist the systems risk unit manager in the development and implementation of the IT Risk Management Framework.
• 2- Ensuring technology controls are sufficiently protecting business risk, through the application of the Technology Risk & Control framework.
• 3- Assess the various information technology risks that the business faces in its operations and implement action plans, policy and procedural changes for risk avoidance and mitigation.
• 4- Identifying risk associated with the use, ownership, operation, involvement, influence and adoption of IT in the organization.
• 5- Conduct in-depth information technology risk assessments including identifying and documenting controls, creating detailed process flows, identifying potential gaps and/or inconsistencies and making sound recommendations for improvement and/or mitigation.
• 6- Track action steps and ensure that findings are mitigated appropriately and in a timely manner.
• 7- Conduct readiness reviews over large information technology development projects ensuing appropriate systems development lifecycle methodologies are being applied and followed.
• 8- Participating and providing IT risk related feedback and inputs during the selection of new technologies, products and vendors.
• 9- Review third party technology vendors and contracts to ensure appropriate controls are in place and functioning effectively.
• 10- Conduct risk assessment for IT projects and application selection.

• 1- Hands on experience in application of the Technology Risk & Control framework.
• 2- Overall experience of 5 years at least in the related areas. Specifically experience in
  • a. Performing risk assessments, control testing/analysis of financial and e-commerce systems for at least 2 years
  • b. Performing risk assessments of new system or technology acquisition and various types of SDLC projects for at least 2 years
  • c. Analysis of incidents and system changes from risk perspective and related recommendations & reporting
  • d. Identifying key motivators for Risk Assessment needs
  • e. IT Asset classification, characterization and prioritization
  • f. Handling scheduled and unscheduled assignments
  • g. Preparation of IT Risk Management policies, procedures in compliance with regulatory needs and international best practices
  • h. Continuous risk monitoring of IT assets and reporting to System Risk manager
  • i. Communicating with various business and IT teams in order to discuss identified risks, finalize assessment reports and control recommendations
• 3- Good understanding of banking industry
• 4- Knowledge and understanding of technologies and systems used in the financial sector / banks
• 5- Knowledge of core banking systems, such as T24 and others.
• 6- Understanding of Information Security frameworks will be added advantage
• 7- Significant analytical and critical thinking skills.
• 8- An IT/Business graduate, related certifications CRISC, CISM, CISSP, CISA etc. will be a plus
• 9- Understanding of the COSO internal controls framework, ISO and ISACA’s IT Risk Management frameworks

About The Company

• Saudi Networkers Services Founded in late 2001, SNS was initially established as a joint venture between Networkers International (Networkers MSB) a UK based company and Saudi Networkers Services a Saudi based company.
• SNS has more than 1,600 employees across the MENA region.
• SNS is an ISO 9001 certified company.
• SNS reaches 380 Contractors till the moment in KSA Only.
• Extensive database 70,000+ Active professional candidates.
• Experienced in our field with more than 8 years of doing such a business.