IT Risk Management Specialist

Role: IT Risk Management Specialist                                                                                                               

Location: Abu Dhabi   

Role Purpose:

• Perform risk & control assessments for all ITD units
• Measure and report result of key risk indicators
• Liaise with all ITD units and participate in reviews that pertain to compliance with Bank and Regulatory IT controls and guidelines
• Assess the risks identified during new enhancements in the existing and new IT systems and provide complete report to senior management.
• Anticipate/identify, communicate/escalate and recommend resolution of technology risk management initiative status and issues

Key Accountabilities of the role:         

• Support the risk identification and management process across ITD 
• Keep management up to date on the results of the risk assessment and submit the results using the designated tool
• Examine systems and procedures to identify potential adverse events, log issues and actions, update risk and controls.
• Identify Key Risk Indicators for the ITD activities and Units and enhance them according to the trends and emerging threats
• Perform ITD RCSAs to ensure that controls are adequate to mitigate the risk and updated to protect sensitive information systems
• Maintain correlation and proper mapping of issues, actions, KRIs, incidents, risk acceptances to risks and controls identified for ITD   

Specialist Skills / Technical Knowledge, Technical Competencies Required for this role:

• Deep understanding of risk management and risk management policy and guidance, technology risk management preferred.
• Understanding of emerging technologies
• Understanding of Operational Risk Management

Previous experience:   

• Bachelor’s Degree (Technology/computers) Preferred 
• Knowledge in Banking Domain along with Technical if available.
• Knowledge in incident Management and Reporting if available.
• Graduate with knowledge in information systems risk management 
• Domain Knowledge of IT Governance, IT Risk Management, Information Security, Networking, Operations security, Security Management practice, Cryptography