Risk Management Consultant

Description:

Role Overview:
We are seeking an experienced Risk Management Consultant to join a leading banking client in Riyadh, Saudi Arabia. The ideal candidate will have a strong foundation in technology and third-party risk, along with an understanding of GRC frameworks. While domain experience in banking, knowledge of ISO 27001, and familiarity with KSA regulations (SAMA, NCA) are considered advantages, they are not mandatory. The role will focus on identifying, analyzing, and mitigating IT and operational risks across a large enterprise environment.

Roles and Responsibilities:
➡️ Identify, evaluate, and mitigate organizational risks related to IT systems, operations, and third-party engagements.
➡️ Conduct detailed Third Party Risk Assessments and ensure compliance with internal and industry standards.
➡️Perform Technology Risk Assessments across systems, infrastructure, and application landscapes.
➡️Develop and implement appropriate risk mitigation and control strategies.
➡️Maintain risk registers and prepare detailed reports for senior stakeholders.
➡️Collaborate with compliance, audit, and information security teams on GRC-related initiatives.
➡️Support internal governance frameworks and risk reporting practices.
Stay updated on risk trends, regulatory changes, and cybersecurity best practices.

Requirements:
Technical & Professional Skills:
➡️Minimum 5 years of relevant experience in Risk Management, IT Audit, or Compliance.
Strong expertise in:
➡️Third Party Risk Assessment
➡️Technology Risk Management
➡️Governance, Risk, and Compliance (GRC) Frameworks
➡️Knowledge of ISO 27001 is a plus, but not mandatory.
➡️Familiarity with KSA regulatory standards like SAMA (Saudi Arabian Monetary Authority) and NCA (National Cybersecurity Authority) is advantageous, though not required.
➡️Understanding of enterprise risk management tools and processes.