IT Risk Consultant

About the role

We are looking for an experienced IT Risk Consultant to lead a comprehensive assessment of our critical business applications and supporting IT infrastructure. The role focuses on identifying risks, closing control gaps, and strengthening the organization’s overall IT risk posture within the Saudi financial services sector.

Key responsibilities

• Develop an IT Risk Management Framework aligned with the Enterprise Risk Management Framework and Saudi regulatory requirements.
• Conduct enterprise‑wide IT risk assessments covering applications, systems, and infrastructure.
• Identify, assess, and document technology, security, operational, data, and third‑party risks.
• Create detailed application‑level and consolidated enterprise‑level risk registers.
• Perform control gap analyses and produce risk heat maps, dashboards, and executive reports.
• Design a prioritized remediation roadmap with timelines, resources, and dependencies.
• Collaborate with IT, cybersecurity, risk, compliance, and business stakeholders to validate findings.
• Provide weekly progress updates, status reports, and next‑step recommendations.

Required profile

• Minimum 8 years of hands‑on experience in IT Risk Management or related fields.
• Proven experience in the financial services and capital markets sector in Saudi Arabia.
• Deep understanding of Saudi regulatory frameworks (CMA, Tadawul, NCA, SAMA ITGF, PDPL, NDMO).
• Extensive exposure to complex technology environments, including trading platforms, Order Management Systems, API gateways, integration layers, middleware, web/mobile applications, market integrations (Tadawul, FIX, EDAA), and financial transaction processing systems.

Required skills

• Trading platforms
• Order Management Systems (OMS)
• API gateways
• Integration layers
• Middleware components
• Web applications
• Mobile applications
• FIX protocol
• EDAA integration
• Financial transaction processing systems