Risk Manager - IT

The Risk Manager – IT is responsible for identifying, assessing, and mitigating technology-related risks across the organization’s IT infrastructure, applications, and operations. Working within the regulatory framework of the UAE, this role involves developing risk management strategies, enforcing compliance, and collaborating with cross-functional teams to ensure business continuity and data security. The ideal candidate will have a strong background in IT risk, cybersecurity, governance, and regulatory compliance.

Responsibilities:

• Developing and implementing IT risk management policies, procedures, and frameworks aligned with business objectives and regulatory requirements.

• Identifying and assessing IT risks across infrastructure, networks, systems, and data assets.

• Conducting regular risk assessments and audits to evaluate controls, detect vulnerabilities, and propose mitigation strategies.

• Collaborating with cybersecurity, compliance, and IT teams to manage operational and strategic risks.

• Monitoring compliance with international standards (ISO 27001, NIST) and local UAE data protection laws.

• Preparing and presenting risk reports, dashboards, and recommendations to senior management and stakeholders.

• Supporting business continuity and disaster recovery planning from a risk management perspective.

• Coordinating with external auditors and regulatory bodies during inspections or reviews.

Requirements:

• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or a related field.

• 5–8 years of experience in IT risk management, cybersecurity, or governance roles, preferably in the UAE.

• Professional certifications such as CRISC, CISA, CISSP, or ISO 27001 Lead Implementer are highly desirable.

• Strong knowledge of IT systems, cloud environments, and cybersecurity best practices.

• Familiarity with UAE regulatory frameworks related to data privacy, financial services, or critical infrastructure.

• Excellent analytical, problem-solving, and communication skills.

• Experience working with GRC (Governance, Risk & Compliance) tools and platforms.