IT Risk Specialist

JOB SUMMARY

Responsible for identifying, assessing, and managing potential risks associated with information technology and cybersecurity systems within the organization. Work closely with various departments to ensure that technology systems are secure, compliant, and aligned with the organization’s risk management strategy.

DUTIES AND RESPONSIBILITIES

1. Conduct risk assessments on IT systems, infrastructure, and applications.

2. Collaborate with IT and cybersecurity teams to identify risk areas in hardware, software, and networks.

3. Develop and implement risk mitigation plans, including recommending technical controls, policies, and procedures to minimize identified risks.

4. Ensure the organization’s IT systems are in place and comply with local and international laws and standards.

5. Assist with audits and reporting for compliance reviews.

6. Work with cross-functional teams to conduct post-incident reviews and improve processes.

7. Review and approve risk mitigation and work with stakeholders to resolve such risks for enhancement opportunities .

8. Support compliance with internal policies and external regulations, including coordination, communications, and required actions with stakeholders.

9. Prepare reports on risk assessments, and incidents for senior management and stakeholders.

10. Present risk findings and mitigation plans in a clear and actionable manner.

11. Communicate the risk posture of the organization to key stakeholders and help prioritize actions.

12. Stay informed about emerging risks in the IT and cybersecurity landscape.

13. Recommend improvements to IT policies, procedures, and controls.

14. Ensure third-party vendors and external partners meet the organization’s cybersecurity standards, evaluating their security posture, and mitigating associated risks.

15. Ensure adherence to standards and policies related to IT governance, security, and privacy.

16. Assist with incident response planning by identifying IT-related risks and recommending steps to mitigate the impact of potential incidents or disruptions.

17. Collaborate with senior management to identify areas for strategic improvement in security posture, contributing to future security investments and risk management planning.

18. Participate in ongoing risk assessments to ensure that risk management strategies evolve with the organization’s needs.

19. Perform IT Risk Assessment for new and existing/ongoing IT projects.

20. Scanning and uploading of critical documents to the Network Attached Storage Server (NASSVR).

21. Perform duties and responsibilities required under latest manual of operations pertaining to the position.

22. Perform any and all other functions assigned from time to time by the management.

WORK RELATIONSHIPS

Reports directly to the Chief Risk Officer.

MINIMUM REQUIREMENT

Education : Bachelor’s degree in Computer Engineering, Computer Science, Information Technology, or any related field

Experience : At least 2 years of experience in IT risk management, information security, cybersecurity, or any related field.

Job Type: Full-time

Benefits:

• Employee discount
• Health insurance
• Life insurance
• Opportunities for promotion
• Paid training
• Pay raise
• Promotion to permanent employee

Application Question(s):

• How soon can you start?
• Are you amenable to work onsite?

Education:

• Bachelor's (Required)

Experience:

• IT Risk: 2 years (Preferred)

Willingness to travel:

• 100% (Required)

Work Location: In person