IT & Cyber Risk Management Advisor

• Support and monitor IT and Cyber Security risks across Business Units, Functions, Tribes, and Agile teams.
• Perform quality assurance throughout the entire IT and Cyber risk lifecycle, from identification and assessment to treatment and closure.
• Conduct IT and Cyber Security risk assessments for applications, projects, third parties, and Shadow IT environments.
• Provide expert advice and guidance on IT and Cyber Risk Management to IT and Business stakeholders.
• Identify, evaluate, and recommend risk mitigation measures to reduce operational and cyber security risks.
• Monitor risk treatment plans and ensure alignment with organizational security policies and compliance requirements.
• Report IT and Cyber Security risks, key risk indicators, and overall risk posture to management and Cyber Security teams.
• Contribute to the continuous improvement of IT Risk Management methodologies, processes, and governance frameworks.
• Ensure compliance with Information Security policies, control frameworks, and regulatory requirements.
• Collaborate with cross-functional teams to strengthen security governance and operational resilience.

• Minimum 8 years of experience in IT Risk Management, Cyber Security, Information Security, or Governance, Risk & Compliance (GRC).
• Strong experience linking Information Security Management Systems (ISMS) with IT Risk Management processes.
• In-depth knowledge of IT Risk Management, Cyber Security Governance, and Operational Risk Management.
• Experience with control frameworks, risk assessments, and audit methodologies.
• Hands-on experience with Cloud Security, including AWS, SaaS, and Hosted Service Providers (HSP).
• Strong understanding of Secure Software Development Lifecycle (SSDLC) and application security best practices.
• Experience in Release Management, Change Management, Incident Management, and Testing processes.
• Knowledge of Agile environments and IT governance practices.
• Experience in the Banking or Financial Services sector is an advantage.
• Professional certifications such as CISSP, CISM, CIPP, or CCSK are preferred.

Soft Skills

• Excellent analytical and problem-solving skills.
• Strong communication and stakeholder management abilities.
• Excellent English written and verbal communication skills.
• Proactive, self-driven, and able to work independently.
• Strong organizational skills with attention to detail.
• Team player with a collaborative mindset.
• Results-oriented, adaptable, and capable of managing multiple priorities.