Job Purpose
To identify, assess, monitor, and manage IT risks associated with the use and operation of Information Technology across the bank, ensuring alignment with regulatory requirements, and emerging technology risk considerations.
Key Accountabilities
Policies, Systems, Processes & Procedures
- Implement approved departmental policies, processes, procedures and instructions.
- Adhere to all Compliance, regulatory and control requirements, including but not limited to, Bank’s AML/CTF policy, guidelines and all SAMA’s regulations relating to account opening, KYC and Customer Due Diligence and fraud detection & prevention.
- Adhere to the Bank’s Cyber Security policies, and all regulations. Ensure to support SNB to comply with internal, national, and international Cyber Security controls and regulations.
IT Risk Management & Assessment
- Identify, assess, mitigate, and monitor IT risks across the bank in alignment with SNB Operational Risk frameworks.
- Conduct comprehensive IT risk assessments covering systems, processes, and infrastructure.
- Ensure IT risks are properly evaluated, documented, and aligned with defined risk appetite.
Third-Party & Vendor Risk
- Assess and manage risks associated with third-party vendors and service providers.
- Lead and support third-party risk management activities to ensure alignment with internal policies and ITGF frameworks.
- Monitor vendor-related risks and ensure appropriate controls and mitigation actions are in place.
Emerging Technology Risk
- Identify and assess risks related to emerging technologies (e.g., AI, cloud computing, digital platforms).
- Track and analyze technology-driven risks and their potential impact on the bank’s risk profile.
- Ensure appropriate governance and controls are established for new technology adoption.
Incident & Issue Management
- Manage IT risk-related escalations and support post-incident reviews.
- Analyze major IT incidents and assess their impact on the overall IT risk landscape.
- Ensure lessons learned are captured and translated into improved controls and processes
Stakeholder Management & Awareness
- Promote IT risk awareness culture across the bank.
- Collaborate with business, technology, and risk teams to ensure effective risk management.
- Provide guidance and communication on IT risk matters across stakeholders.
Qualifications, Experience, Skills & Competencies
Education:
- Bachelor's degree or higher in IT, Computer science or risk related field
- Relevant certifications are an advantage.
Experience:
- 5-8 years of Experience in IT preferably in a banking environment.
Skills & Competencies:
- Leadership qualities, to enable the team to drive the concept across the organization.
- Excellent interpersonal communication, people management, problem-solving and presentation skills.
- Demonstrating good judgment, poise and maturity in interaction with managers and customers, other functions
- Working effectively with relevant stakeholders to expand common ground and maximize buy in into ITD priorities.
