IT Risk Senior Specialist

About Neoleap

Neoleap is seeking an IT Risk Senior Specialist to join its team in Riyadh, Saudi Arabia. This full-time role is central to ensuring the secure operation of the organization's technology environment and supporting business objectives through effective risk management.

Role Purpose

The primary purpose of this role is to identify, assess, and monitor IT and cybersecurity risks. The specialist will ensure the implementation of effective controls, maintain regulatory compliance, and contribute to the secure and resilient operation of the organization's technology infrastructure.

Key Responsibilities

• Conduct IT risk assessments and control reviews to identify and evaluate technology, cybersecurity, and operational risks.
• Maintain the IT risk register and track risk treatment plans to ensure timely remediation of identified issues.
• Support the development, implementation, and continuous improvement of IT risk management policies, procedures, and frameworks.
• Assess risks associated with new systems, applications, projects, and technology changes to ensure appropriate controls are implemented.
• Monitor compliance with regulatory requirements, internal policies, and industry standards, and support audit and regulatory activities.
• Track and report Key Risk Indicators (KRIs), control deficiencies, and risk mitigation actions to relevant stakeholders.
• Collaborate with Technology, Information Security, Compliance, and business teams to integrate risk management practices into day-to-day operations.
• Conduct third-party and vendor risk assessments to evaluate and monitor external technology-related risks.
• Support business continuity, disaster recovery, and operational resilience activities, including testing and reporting on results.
• Assist in the investigation of technology incidents, security events, and control failures, and monitor the implementation of corrective actions.

Experience and Qualifications

Candidates for this role should possess 5-10 years of relevant experience in IT risk management or a related field. The position requires a strong understanding of IT and cybersecurity risk assessment methodologies, control frameworks, and regulatory compliance requirements.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role involves collaboration with various internal teams, including Technology, Information Security, and Compliance, as well as external vendors and third parties.

Application Process

Neoleap invites qualified candidates to apply for this position. Salary details will be discussed during the interview process.