IT GRC & Resiliency Manager

Educational Qualifications

Bachelor’s degree in Computer Science, IT, Engineering or equivalent.

Relevant Experience

Minimum 15 years in IT Governance, Risk, Compliance and IT Management.

Managerial Experience

IT management experience required; specific number of years not stated.

Banking / Financial Sector Experience

Banking systems and technology governance knowledge.

Professional Certifications

CISA, COBIT, ISO 27001, ISO 9001, ITIL or equivalent.

Key Responsibilities:-

• Implement enterprise risk management objectives and mandates.
• Establish, manage and review the Risk & Control Self-Assessment process.
• Provide technology leadership risk management guidance and risk treatment options to reduce technology risks.
• Manage the development and reporting of Key Risk Indicators to measure the controls effectiveness.
• Ensures IT Risks adequate reporting and escalation is in place
• Interface and represent IT department in Operational Risk Management engagements and forums.
• Drives information risk awareness within the IT Division.
• Conduct risk assessments to minimize residual risk to align with the target risk appetite.
• Provide strategic direction, tactical management, emergency planning, disaster recovery strategies and operational analysis of cyber, fraud, and security threats faced .
• Maintain IT Policies, standards and Procedure, guidelines documentation. Conduct processes gap Analysis against best practices.
• Designs, implement, manage, review and continually improve the adoption of International Standard Systems (ISO) for ITD.
• Plan and Manage IT Awareness programs related to IT processes, Governance and Compliance
• Deliver ITD periodic performance reports to management.
• Represents the Division on IT Governance and Compliance matters internally and externally in alignment with SIB processes communication practices (NESA, PCI, UAE CB, and CPR).
• Oversight and coordinate across the Audit, Compliance and Processes management within ITD.
• Bachelor’s degree in Computer Science, IT, Engineering or equivalent.