Head Of Technology Risk Governance Section📣 إعلان

About the Role

Riyad Bank is seeking a Head Of Technology Risk Governance Section to lead and manage the Technology Risk Governance function within the Technology Risk Department (TRD). This full-time position is based in Riyadh, Saudi Arabia, and requires over 10 years of experience. The role is critical in establishing, maintaining, and enhancing the Bank’s technology risk governance framework, policies, methodologies, and reporting mechanisms.

Role Purpose and Context

The Head of Technology Risk Governance Section ensures that technology risk is managed through a structured, consistent, efficient, and forward-looking framework that aligns with regulatory expectations and business objectives. This role acts as the central authority for technology risk governance, promoting a risk-aware culture, providing independent oversight, enabling effective decision-making, and ensuring technology risk exposures are clearly articulated, monitored, and escalated across the Bank.

Key Responsibilities

• Define, maintain, and enhance the Bank’s technology risk governance framework, ensuring alignment with regulatory requirements (SAMA ITGF, NCA) and industry best practices.
• Approve technology risk policies, standards, methodologies, and procedures across TRD, and ensure consistent application of governance standards.
• Establish clear risk taxonomy, definitions, and classification standards.
• Approve methodologies for technology risk assessment, RCSA challenge, and control evaluation, and ensure robust frameworks for IT control effectiveness testing.
• Validate the consistency and quality of risk assessment outputs and oversee the definition and validation of KRIs, KPIs, and technology risk metrics.
• Own and approve enterprise-level technology risk dashboards and reporting for senior management and Board Committees, consolidating risk inputs into a coherent view.
• Ensure clear articulation of top technology risks, systemic risks, and emerging exposures, and validate the accuracy of risk data used for reporting.
• Establish and oversee the integration of multiple risk data sources and drive the development of forward-looking risk intelligence capabilities.
• Ensure governance frameworks support lifecycle-based technology risk oversight and validate that risk governance requirements are embedded in transformation initiatives.
• Represent TRD Governance in enterprise governance forums and coordinate with relevant departments to ensure integrated risk governance.
• Ensure governance practices comply with regulatory requirements and oversee preparation for regulatory reviews and audits.
• Own TRD-wide reporting standards and quality controls, and approve all executive-level technology risk reports.
• Continuously enhance governance frameworks, tools, and reporting capabilities, and build team capabilities in line with the evolving technology risk landscape.

Qualifications and Experience

• A minimum of 10 years of experience in technology risk management or a related field.
• Proven experience in developing and implementing technology risk governance frameworks, policies, and methodologies.
• Strong understanding of regulatory requirements such as SAMA ITGF and NCA.
• Experience in risk aggregation, reporting, and stakeholder engagement at an executive level.
• Demonstrated ability to lead and develop a team.

Skills and Competencies

• Expertise in technology risk assessment, control validation, and risk reporting.
• Proficiency in integrating diverse risk data sources and developing risk intelligence capabilities.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills for effective stakeholder engagement.
• Ability to provide authoritative guidance and promote a risk-aware culture.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role involves significant interaction with senior management, technology leaders, and various departments across the Bank, including Cyber Security, Operational Risk, Compliance, and Internal Audit.