neoleap تعلن عن وظيفة أخصائي أول مخاطر تقنية المعلومات في الرياض

Purpose:

To identify, assess, and monitor IT and cybersecurity risks, ensuring effective controls, regulatory compliance, and the secure operation of the organization's technology environment while supporting business objectives and growth.

Main Duties and Responsibilities:

• Conduct IT risk assessments and control reviews to identify and evaluate technology, cybersecurity, and operational risks.
• Maintain the IT risk register and track risk treatment plans to ensure timely remediation of identified issues.
• Support the development, implementation, and continuous improvement of IT risk management policies, procedures, and frameworks.
• Assess risks associated with new systems, applications, projects, and technology changes to ensure appropriate controls are implemented.
• Monitor compliance with regulatory requirements, internal policies, and industry standards, and support audit and regulatory activities.
• Track and report Key Risk Indicators (KRIs), control deficiencies, and risk mitigation actions to relevant stakeholders.
• Collaborate with Technology, Information Security, Compliance, and business teams to integrate risk management practices into day-to-day operations.
• Conduct third-party and vendor risk assessments to evaluate and monitor external technology-related risks.
• Support business continuity, disaster recovery, and operational resilience activities, including testing and reporting on results.
• Assist in the investigation of technology incidents, security events, and control failures, and monitor the implementation of corrective actions.