Assistant Manager Risk & Compliance

Mohamed Aladdin is looking for a Assistant Manager (Risk & Compliance) To work in Dubai.

Regulatory Compliance:

• Stay updated on relevant laws, regulations, and industry standards related to IT, Information Security, data protection, and cybersecurity.
• Ensure that the IT practices align with regulatory requirements.
• Collaborate with legal and compliance teams to interpret and implement regulations.

Risk Assessment:

• Conduct regular risk assessments on IT systems, processes, new products and projects.
• Identify potential risks and vulnerabilities and assess their potential impact on the organization.
• Work with IT teams to develop and implement risk mitigation strategies.

Policy Development and Enforcement:

• Develop and update Information Security/IT security and compliance policies in line with industry best practices and regulatory requirements.
• Communicate policies to relevant stakeholders and ensure compliance through training and awareness programs.
• Enforce adherence to policies and initiate corrective actions as necessary.

Audit and Monitoring:

• Plan and conduct compliance audits of IT systems and processes to ensure compliance.
• Collaborate with external auditors during internal and external audits.

Vendor Management:

• Evaluate and assess third-party vendors for compliance with Information Security and Governance standards.
• Establish and monitor compliance requirements for vendors.
• Collaborate with procurement to ensure vendors meet security and compliance criteria.

Training and Awareness:

• Develop and deliver training programs on Information Security/IT security and compliance for employees.
• Promote a culture of security awareness throughout the organization.

Documentation:

• Maintain comprehensive documentation of Information Security/IT security policies, procedures, and compliance efforts.
• Generate reports for management and regulatory authorities as needed.

Collaboration:

• Work closely with IT, legal, and business units to ensure a holistic approach to Information Security/IT risk and compliance.
• Provide guidance and support to various teams on compliance matters.

Qualification:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Relevant certifications (e.g., CISSP, CISM, CRISC) are highly desirable.
• Several years of experience in IT risk management, compliance, or a related field.
• Strong knowledge of relevant regulations and standards.
• Excellent communication and interpersonal skills.