Assistant Manager, IT Risk

<ul>
<li>Develop, embed, maintain and implement IT Risk Management framework, policies and procedures for EBC.</li>
<li>Performing risk assessments on IT systems and solutions, identifying and assessing potential IT risks and vulnerabilities, monitor emerging threats, and collaborate with cross-functional teams to implement effective risk management measures.</li>
<li>Transform the risk assessment exercise into recommended strategies for risk mitigation and action points, follow up with the concerned owners.</li>
<li>Prepare and present risk management reports to different stakeholders.</li>
<li>Educate staff on IT risk management practices by deliver Risk awareness for EBC staff.</li>
<li>Oversee the incidents and incident response process related to IT systems and services to ensure identifying of the Root cause and implementing the required controls.</li>
<li>Develop the Key risk indicators to monitor potential threats that may lead to business disruption, financial, compliance and reputational impact achieving the company objectives.</li>
<li>Reviewing new contracts or internal policies and procedures related to technical scope.</li>
<li>Assess the IT related changes to ensure that IT risks are managed appropriately and minimizing the impact that could affect IT systems and services.</li>
<li>Maintain IT risk register and events log and control assessments.</li>
<li>Continuously improving and updating the IT risk management practices, and controls monitoring.</li>
<li>Serve as a subject matter expert to technology teams for IT risk management requirements.</li>
</ul><h2>Requirements</h2><ul>
<li>Bachelor’s degree in computer science or Electronics &amp; Communication Engineering or technology-related field or equivalent certification &amp; experience related to IT Risks.</li>
<li>Minimum 10 years of demonstrated technical &amp; functional experience in Risk Management, IT Risk management and information Technology field in banking sector or fintech or consultancy firms.</li>
<li>Required Licensed or certifications: One or more of the following CISA, CRISC, ISO 31000, ISACA IT Risk Fundamentals or similar certifications strongly preferred.</li>
<li>Working knowledge in two or more of the following IT and risk domains: infrastructure, SDLC, service management, data protection, privacy, IT risk management, third-party risk management.</li>
<li>Working knowledge of emerging IT risks and risk-intelligent adoption of new and existing technologies.</li>
<li>Ability to multi-task, prioritize work and work independently.</li>
<li>Good communication and presentation skills.</li>
<li>Ability and willingness to learn new subject areas.</li>
<li>Ability to work within a fast-paced environment.</li>
<li>Excellent analysis skills.</li>
<li>Project management skills is plus.</li>
</ul>