IT Risk & Compliance Specialist

We're looking for a Risk Assessment and Cybersecurity professional to join our team!

Responsibilities include:

🔹 Maintaining, updating, and challenging the Cyber Risk Assessment methodology

🔹 Supporting the implementation of IT and Cyber Risk Assessment processes within the supply chain

🔹 Planning, executing, and validating operational risk surveys across all technological processes, using a dedicated system, and formulating risk mitigation plans

🔹 Dynamically managing the IT Risk Map

🔹 Guiding and challenging technology unit managers in reporting and investigating failure events

🔹 Conducting comprehensive IT risk assessments across organizational systems to support prioritization and planning of a multi-year information security audit program

🔹 Updating policies and procedures in the IT and InfoSec domains annually

🔹 Responding to customer and partner security questionnaires and requirements

🔹 Supporting ISO 27001 certification processes for the technology division

🔹 Ongoing collaboration with compliance functions, internal audit, regulators, and supervisory bodies regarding IT risk management and information security

Requirements:

✅ Deep familiarity with risk management frameworks (NIST / COBIT / ISO)

✅ Minimum 5 years of experience in IT risk management, risk assessments, and control effectiveness evaluations

✅ Proven experience working with internal audit, risk management units in financial institutions, SOX audits, and audits by regulatory bodies

✅ Strong knowledge of banking regulations

✅ Experience in managing technology risks in cloud environments – an advantage

✅ Academic degree and/or relevant professional certifications in risk management – required

✅ Full professional fluency in English – required