The Emirates Group Hiring for IT Risk Manager Job at Dubai Full Time

Job Purpose: Develop and maintain the IT Risk Framework, provide reporting and risk metrics of the risk management activity, maintain the IT Risk Register, with a focus on CyberSecurity risk, Third party risk, Operational risk and Project & Programme risk. Conduct regular risk assessments and report the result to Management. Act as an enabler for the business and strengthen our IT risk framework to support Management decision making. Job Outline: – Define and develop a risk management framework to effectively assess and manage all IT risks that could potentially impact the goals of Emirates IT. The framework should be based on industry standards and industry best-practices. – Develop a risk assessment methodology within the framework such that all IT risks are identified, assessed based on likelihood and impact, recorded, prioritised, mitigated and communicated to stakeholders. – Assess current levels of risks within the Emirates IT environment on an on-going basis in accordance with the implemented framework. Ensure that the mitigation plan and the responsibility for mitigation is agreed for all the identified security risks with the risk owner. – Maintain the IT Risk Register to effectively record, communicate and track the progress of mitigation of the risks. – Co-ordinate with risk owners and manage all the identified risks through their life-cycle from identification to immediate containment to resolution to verification to closure through the IT Risk Register. Provide appropriate reports on the risk status to the Management. – Provide regular support to the CyberSecurity teams on security and risks in projects. – Train IT staff on the Risk Management methodology and usage of the IT Risk Register. – Keep abreast of new and emerging risks within the IT environment and disseminate the relevant information to all concerned and ensure immediate containment actions are initiated. – Develop Key Risk Indicators to assess the CyberSecurity risk posture of business areas, automate the process and provide regular updates to the business. – Provide Management regular updates on the Top 10 risks of Emirates IT. – Utilise opportunities to develop direct reports, establishing clear objectives and supporting them through training, and/or leading projects and intiatives that meet their development plans. Mentor, coach and provide feedback to support their development to cultivate a high performance culture which aligns with the future capability needs of IT.

Qualifications & Experience: Experience and Qualifications IT Security : 8+ Years Degree or Honours (12+3 or equivalent) : Degree in an IT related subject Experience in IT risk management and CyberSecurity Knowledge/skills: International Standards such as NIST, ISO31000, ISO27001, PCI-DSS, ITIL, COBIT, Cyber Security standards, etc. Highly effective communication skills with written and oral fluency in English Leadership Role : YES Safety Sensitive Role: No

Salary & Benefits: Join us in a management role and enjoy an attractive tax-free salary. On top of our generous travel benefits, including discounted flights and hotel stays around the world, this managerial role also has an excellent leave and healthcare package. That’s on top of transport benefits, life insurance and more.