As the Technology Risk Officer, who will identify, assess, and mitigate technology-related risks, including cybersecurity threats and operational failures, to protect company assets. They develop risk management frameworks, ensure regulatory compliance, monitor IT systems, and report on mitigation efforts to senior stakeholders, acting as a second line of defense.
Key Responsibilities
- Risk Identification & Assessment: Proactively identify, analyze, and document potential technology risks in new initiatives and existing IT systems, often using tools like Audit ratings, Risk and Control Self-Assessment (RCSA), and Key Risk Indicators (KRIs).
- Mitigation & Control Formulation: Develop and implement risk management frameworks, policies, and controls to mitigate risks to acceptable levels.
- Compliance & Governance: Ensure technology practices align with regulatory expectations and industry standards.
- Monitoring & Reporting: Monitor the technology control environment, report on risk trends, and provide insights to committees.
- Liaison & Collaboration: Work with IT, security, and business teams to address vulnerabilities.
Key Skills & Qualifications
- Experience: Usually 5+ years in IT risk management, Information Security, or audit roles.
- Technical Knowledge: Deep understanding of cybersecurity frameworks, IT controls, and risk management tools.
- Communication: Strong ability to communicate risk-related information to both technical and non-technical staff.
- Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
- ISACA Certified in Risk and Information Systems Control (CRISC)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
