Assistant Manager, IT Risk
Assistant Manager, IT Risk
egyptian banks company- Posted 4 hours ago
- Be among the first 10 applicants
Job Description
- Develop, embed, maintain and implement IT Risk Management framework, policies and procedures for EBC
- Performing risk assessments on IT systems and solutions, identifying and assessing potential IT risks and vulnerabilities, monitor emerging threats, and collaborate with cross-functional teams to implement effective risk management measures
- Transform the risk assessment exercise into recommended strategies for risk mitigation and action points, follow up with the concerned owners
- Prepare and present risk management reports to different stakeholders
- Educate staff on IT risk management practices by deliver Risk awareness for EBC staff
- Oversee the incidents and incident response process related to IT systems and services to ensure identifying of the Root cause and implementing the required controls
- Develop the Key risk indicators to monitor potential threats that may lead to business disruption, financial, compliance and reputational impact achieving the company objectives
- Reviewing new contracts or internal policies and procedures related to technical scope
- Assess the IT related changes to ensure that IT risks are managed appropriately and minimizing the impact that could affect IT systems and services.
- Maintain IT risk register and events log and control assessments
- Continuously improving and updating the IT risk management practices, and controls monitoring
- Serve as a subject matter expert to technology teams for IT risk management requirements.
- Bachelor's degree in computer science or Electronics & Communication Engineering or technology-related field or equivalent certification & experience related to IT Risks.
- Minimum 10 years of demonstrated technical & functional experience in Risk Management, IT Risk management and information Technology field in banking sector or fintech or consultancy firms
- Required Licensed or certifications: One or more of the following CISA, CRISC, ISO 31000, ISACA IT Risk Fundamentals or similar certifications strongly preferred
- Working knowledge in two or more of the following IT and risk domains: infrastructure, SDLC, service management, data protection, privacy, IT risk management, third-party risk management
- Working knowledge of emerging IT risks and risk-intelligent adoption of new and existing technologies
- Ability to multi-task, prioritize work and work independently
- Good communication and presentation skills
- Ability and willingness to learn new subject areas
- Ability to work within a fast-paced environment
- Excellent analysis skills
- Project management skills is plus
More Info
Key Skills
ISO 31000
IT Risk Fundamentals
third-party risk management
ISACA

