IT Risk Consultant (Financial Services, Saudi Arabia)

About the role

We are looking for an experienced IT Risk Consultant to lead a comprehensive assessment of our critical business applications and supporting IT infrastructure. The role focuses on identifying risks, control gaps and delivering actionable recommendations to enhance the organization’s IT risk posture, particularly within the Saudi financial services sector.

Key responsibilities

• Develop an IT Risk Management Framework aligned with the Enterprise Risk Management Framework and Saudi regulatory requirements (CMA, Tadawul, NCA, SAMA ITGF, NDMO, PDPL).
• Conduct enterprise‑wide IT risk assessments covering applications, systems and infrastructure, documenting inherent and residual risks.
• Create detailed application‑level and enterprise‑level risk registers and produce risk heat maps, dashboards and executive reports.
• Perform control gap analyses, identify deficiencies and propose remediation actions with timelines and resource estimates.
• Collaborate with IT, cybersecurity, risk, compliance and business stakeholders to validate findings and agree on risk treatment strategies.
• Provide weekly progress updates, status reports and highlight emerging issues.

Required profile

• Minimum 8 years of hands‑on experience in IT risk management or related fields.
• Proven experience in the financial services and capital markets sector in Saudi Arabia.
• Strong understanding of Saudi regulatory frameworks (CMA, NCA, SAMA ITGF, PDPL, etc.).
• Experience assessing complex technology environments, including trading platforms, OMS, API gateways, middleware, web and mobile applications, and market integrations such as FIX protocol.

Required skills

• IT Risk Management
• Enterprise risk assessment methodologies
• Control gap analysis
• Risk register creation and reporting
• Trading platforms
• Order Management Systems (OMS)
• API gateways
• FIX protocol
• Web and mobile application security
• Middleware components