IT Risk Senior Specialist

Purpose: To identify, assess, and monitor IT and cybersecurity risks, ensuring effective controls, regulatory compliance, and the secure operation of the organization's technology environment while supporting business objectives and growth. Main Duties and Responsibilities: Conduct IT risk assessments and control reviews to identify and evaluate technology, cybersecurity, and operational risks. Maintain the IT risk register and track risk treatment plans to ensure timely remediation of identified issues. Support the development, implementation, and continuous improvement of IT risk management policies, procedures, and frameworks. Assess risks associated with new systems, applications, projects, and technology changes to ensure appropriate controls are implemented. Monitor compliance with regulatory requirements, internal policies, and industry standards, and support audit and regulatory activities. Track and report Key Risk Indicators (KRIs), control deficiencies, and risk mitigation actions to relevant stakeholders. Collaborate with Technology, Information Security, Compliance, and business teams to integrate risk management practices into day-to-day operations. Conduct third-party and vendor risk assessments to evaluate and monitor external technology-related risks. Support business continuity, disaster recovery, and operational resilience activities, including testing and reporting on results. Assist in the investigation of technology incidents, security events, and control failures, and monitor the implementation of corrective actions. Show more Show less