IT Risk Senior Specialist

About the role

Responsibilities

• Conduct IT risk assessments and control reviews to identify and evaluate technology, cybersecurity, and operational risks.
• Maintain the IT risk register and track risk treatment plans to ensure timely remediation of identified issues.
• Support the development, implementation, and continuous improvement of IT risk management policies, procedures, and frameworks.
• Assess risks associated with new systems, applications, projects, and technology changes to ensure appropriate controls are implemented.
• Monitor compliance with regulatory requirements, internal policies, and industry standards, and support audit and regulatory activities.
• Track and report Key Risk Indicators (KRIs), control deficiencies, and risk mitigation actions to relevant stakeholders.
• Collaborate with Technology, Information Security, Compliance, and business teams to integrate risk management practices into day-to-day operations.
• Conduct third-party and vendor risk assessments to evaluate and monitor external technology-related risks.
• Support business continuity, disaster recovery, and operational resilience activities, including testing and reporting on results.
• Assist in the investigation of technology incidents, security events, and control failures, and monitor the implementation of corrective actions.

Skills

• IT risk assessment
• control reviews
• IT risk register
• risk treatment plans
• policies and frameworks
• regulatory compliance
• audit support
• KRIs
• vendor risk assessments
• business continuity
• disaster recovery
• operational resilience
• security incident investigation
• corrective action monitoring
• cross-functional collaboration