Information Technology Risk Manager

To identify, assess, and mitigate risks associated with IT systems, infrastructure, cybersecurity, and digital processes. To ensure compliance with regulatory requirements and supports implementation of IT risk management framework. To support the operational risk department in RCSA & KRI activities. To evaluate emerging technology risks and recommend appropriate controls. To monitor adherence to IT policies, procedures, and control frameworks. To support audits, regulatory inspections, and compliance reviews. To assess technology resilience and recovery capabilities. To present risk insights and recommendations to senior management and governance committees. To monitor IT Key Risk Indicators (KRIs), maintain risk registers, track control gaps and ensure timely closure of mitigation/action plans. To coordinate with IT, Information Security, Compliance, Internal Audit and business teams for risk reviews, audits, regulatory submissions and remediation tracking. To support implementation and continuous improvement of IT governance, cybersecurity, incident management, access management and change management controls. To review outsourced IT service providers from a risk perspective, including vendor due diligence, SLA adherence, data security, and compliance with internal policies.