IT Risk Analyst

Job description / Role

Department: Risk Enterprise

Employment type: Full time
Location: KSA
Reporting to: Faisal Hejazi

Description

The IT Risk Analyst will identify, assess, and monitor IT and cybersecurity risks, develop mitigation strategies, and ensure compliance with regulations.

Key responsibilities

• Risk assessment and analysis: Identify and evaluate IT system and process risks, including cybersecurity threats, vulnerabilities, and potential consequences.
• Strategy and mitigation: Develop and implement risk management policies, procedures, and security protocols, such as firewalls and data encryption.
• Monitoring and reporting: Track and monitor risk activities, investigate security incidents, and prepare reports on key metrics and findings for stakeholders.
• Compliance and governance: Ensure compliance with regulatory standards and advise on internal controls to improve the organization's risk posture.
• Collaboration: Work with other IT personnel and stakeholders to manage security needs and communicate findings, risks, and recommendations.
• Awareness: Build understanding and awareness of cybersecurity risks throughout the organization.

Skills, knowledge & expertise

• Strong risk management and analysis background
• Cybersecurity principles and incident response
• Experience in IT audit and internal controls
• Experience with Governance, Risk, and Compliance (GRC) frameworks (e.g., ISO 27001)
• Proficiency in data analysis tools (e.g., SQL, Excel)
• Skilled in Python for scripting and automation
• Strong analytical and problem-solving abilities
• Good communication and presentation skills
• Critical thinking
• Ability to work collaboratively with diverse teams
• Adaptability to a constantly evolving threat landscape