Digital Risk Management Engineer

About the role

A Digital Risk Management Engineer is needed in Dammam to review IT systems, assess risks and support IT risk reporting and remediation. The position works in person, with interviews conducted remotely.

Key responsibilities

• Conduct IT systems reviews to identify and assess risks, with remediation recommendations.
• Assure the effectiveness and efficiency of IT control environments across all IT domains and business areas.
• Monitor threat indicators, exploits and vulnerabilities and follow up on them for timely remediation.
• Support incident response and provide consolidated IT risk progress reports to management.
• Prepare consolidated IT risk reports and dashboards for Technology Risk and committees.
• Document and maintain IT risk reports, SOPs and departmental outputs.
• Identify top critical IT risks and recommend frameworks to capture and govern them.
• Review and recommend improvements to IT risk measurement techniques (e.g. RCSAs).
• Act as focal point with ERM, IT Governance & Compliance, Information Security and IT for risk reporting and remediation.
• Take part in implementing IT and digital risk tools and systems with project teams and the digital transformation division.

Required profile

• Bachelor's degree in Information Technology, IT Security, Computer Information Systems or equivalent.
• Minimum 3-5 years of solid experience in Risk Management, Technology Risk, Information Security or IT.
• Information Assurance certifications such as CISSP, CISA, Security+, GSEC, CRISC or equivalent preferred.
• Strong verbal and written communication in English and Arabic.
• Ability to interpret regulations and communicate effectively across all levels.

Required skills

• Excellent knowledge of Microsoft Office (Word, Excel, PowerPoint), internet and email.
• Solid knowledge of automated reporting systems and project management.
• Experience with Key Risk Indicators (KRIs) and technology risk reporting preferred.
• Strong presentation and teamwork skills, results-driven and detail-oriented.