Job description

The IT Risk Manager is responsible for the identification, assessment, monitoring, and reporting of IT and Cyber risks across the bank's technology environment. This role ensures compliance with regulatory standards, including SAMA Cybersecurity Framework (CSF), NCA Essential Cybersecurity Controls (ECC), ISO 27001, COBIT, and PCI-DSS. The position involves developing and maintaining the IT Risk Management Framework and IT Risk Register, performing inherent and residual risk analysis, monitoring remediation plans and control effectiveness, managing third-party IT risk assessments, and preparing comprehensive IT Risk reports for Senior Management, Risk Committee, and the Board. The role requires collaboration with internal stakeholders to support internal and regulatory audits while embedding strong IT and Cyber risk management practices within the bank.