IT Risk & Compliance (banking)

A leading UAE bank is seeking an experienced Technology Risk & Compliance Consultant to strengthen technology risk management, regulatory compliance and operational resilience. This hands-on role involves assessing technology risks, testing controls, addressing audit findings and ensuring alignment with regulatory requirements.

Key Requirements

6+ years of experience in technology risk, IT audit, Governance, Risk & Compliance (GRC) or cybersecurity compliance.

Experience in banking, financial services or a consulting firm serving banking clients.

Strong knowledge of ISO 27001, NIST, COBIT, IT General Controls (ITGC) and PCI DSS.

Experience with banking regulators, preferably the UAE Central Bank (CBUAE); SAMA or other GCC regulators are also relevant.

Hands-on experience with GRC tools such as RSA Archer, ServiceNow GRC or OneTrust is an advantage.

CISA, CRISC, CISM or ISO 27001 Lead Auditor certification is preferred.

Key Responsibilities

Identify, assess and report technology and information security risks.

Test ITGC and technology controls, tracking issues through to closure.

Lead or support remediation of internal audit, external audit and regulatory findings.

Assess third-party, vendor, cloud and outsourcing technology risks.

Support compliance with CBUAE technology, cybersecurity and outsourcing requirements.

Contribute to business continuity, disaster recovery and operational resilience initiatives.

Maintain risk registers, policies and standards, and report progress to senior stakeholders.