Information Technology Risk Manager

About the Role

The Saudi National Bank (SNB) is seeking an Information Technology Risk Manager to join their team in Makkah, with locations in Jeddah and Makkah. This full-time role focuses on identifying, assessing, monitoring, and managing IT risks across the bank, ensuring compliance with regulatory requirements and addressing emerging technology risk considerations.

Key Responsibilities

• Implement approved departmental policies, processes, procedures, and instructions.
• Adhere to all compliance, regulatory, and control requirements, including AML/CTF policy, SAMA regulations, KYC, Customer Due Diligence, and fraud detection/prevention.
• Comply with the Bank’s Cyber Security policies and regulations, supporting SNB in meeting internal, national, and international Cyber Security controls.
• Identify, assess, mitigate, and monitor IT risks in alignment with SNB Operational Risk frameworks.
• Conduct comprehensive IT risk assessments covering systems, processes, and infrastructure, ensuring proper evaluation, documentation, and alignment with defined risk appetite.
• Assess and manage risks associated with third-party vendors and service providers, leading third-party risk management activities to align with internal policies and ITGF frameworks.
• Monitor vendor-related risks and ensure appropriate controls and mitigation actions are in place.
• Identify and assess risks related to emerging technologies such as AI, cloud computing, and digital platforms.
• Track and analyze technology-driven risks and their potential impact on the bank’s risk profile, ensuring appropriate governance and controls for new technology adoption.
• Manage IT risk-related escalations and support post-incident reviews.
• Analyze major IT incidents and assess their impact on the overall IT risk landscape, ensuring lessons learned are captured and translated into improved controls and processes.
• Promote an IT risk awareness culture across the bank.
• Collaborate with business, technology, and risk teams to ensure effective risk management.
• Provide guidance and communication on IT risk matters to stakeholders.

Experience and Qualifications

• Candidates should possess 5-10 years of relevant experience in Information Technology Risk Management.

Work Type and Location

This is a full-time position based in the Makkah region, with operations in both Jeddah and Makkah.