Job Purpose
The Senior Officer – Technology Risk is responsible for identifying, assessing, monitoring, and managing technology-related risks across the organization. The role ensures that technology risks are properly documented, mitigated, and aligned with the organization's enterprise risk management framework, while supporting technology and cybersecurity resilience initiatives.
Key Responsibilities
Technology Risk Assessments
- Conduct periodic technology risk assessments across IT operations, projects, systems, and third-party environments.
- Identify, evaluate, and document risks related to technology, cybersecurity, and operational processes.
- Ensure risk assessment findings are recorded and maintained in accordance with organizational policies and security standards.
Technology Risk Management
- Maintain and manage the Technology Risk Register.
- Ensure technology risks are accurately tracked, monitored, and aligned with the Enterprise Risk Management (ERM) framework.
- Monitor risk status, treatment plans, and reporting requirements.
Technology Risk Mitigation
- Work with technology and business stakeholders to develop risk mitigation strategies.
- Monitor implementation of risk treatment plans and corrective actions.
- Ensure all risk mitigation activities are documented and periodically reviewed.
Continuous Improvement
- Support the enhancement and maturity of the Technology Risk Management Program.
- Identify opportunities to improve risk assessment methodologies, processes, and reporting mechanisms.
- Promote risk awareness and knowledge sharing across technology teams.
Technology Incident Risk Support
- Support technology and cybersecurity incident response activities by assessing risk impact and potential business consequences.
- Provide risk advisory during critical incidents and major technology events.
- Assist with post-incident reviews and lessons learned exercises.
Requirements
Education
- Bachelor's Degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
Experience
- 7–10 years of overall professional experience.
- Minimum 5–7 years of experience in Technology Risk, IT Risk Management, Cybersecurity Risk, Governance, Risk & Compliance (GRC), or related disciplines.
- Experience in large-scale technology environments and transformation programs.
- Experience in aviation, transportation, critical infrastructure, or highly regulated industries is preferred.
Certifications (Preferred)
- CRISC (Certified in Risk and Information Systems Control)
- CRMP (Certified Risk Management Professional)
- PMP (Project Management Professional) or PRINCE2
- ITIL Foundation or higher
Key Skills
- Technology Risk Management
- IT Risk Assessment
- Enterprise Risk Management (ERM)
- Governance, Risk & Compliance (GRC)
- Risk Register Management
- Cybersecurity Risk Analysis
- Third-Party Risk Management
- Incident Risk Assessment
- Risk Mitigation Planning
- Stakeholder Management
- Programme & Project Risk Management
- Analytical and Problem-Solving Skills
- Strategic Thinking
- Report Writing and Risk Reporting
- Communication and Presentation Skills
