IT Risk Analyst

Department: Risk EnterpriseEmployment Type: Full TimeLocation: KSAReporting To: Faisal HejaziDescriptionThe IT Risk Analyst will identify, assess, and monitor IT and cybersecurity risks, develop mitigation strategies, and ensure compliance with regulations.Key Responsibilities Risk assessment and analysis: Identify and evaluate IT system and process risks, including cybersecurity threats, vulnerabilities, and potential consequences. Strategy and mitigation: Develop and implement risk management policies, procedures, and security protocols, such as firewalls and data encryption. Monitoring and reporting: Track and monitor risk activities, investigate security incidents, and prepare reports on key metrics and findings for stakeholders. Compliance and governance: Ensure compliance with regulatory standards and advise on internal controls to improve the organization's risk posture. Collaboration: Work with other IT personnel and stakeholders to manage security needs and communicate findings, risks, and recommendations. Awareness: Build understanding and awareness of cybersecurity risks throughout the organization. Skills, Knowledge & ExpertiseStrong risk management and analysis backgroundCybersecurity principles and incident responseExperience in IT audit and internal controlsExperience with Governance, Risk, and Compliance (GRC) frameworks (e.g., ISO 27001)Proficiency in Data analysis tools (e.g., SQL, Excel)Skilled in Python for scripting and automationStrong analytical and problem-solving abilitiesGood communication and presentation skillsCritical thinkingAbility to work collaboratively with diverse teamsAdaptability to a constantly evolving threat landscape