IT Risk Assessor – AI, Systems Integration, Technology Risk & Compliance بعقد في أبوظبي
التخصص
تكنولوجيا المعلومات
نوع الدوام
عقد مؤقت
الخبرة
أي مستوى
الموقع
أبوظبي
وصف الوظيفة
Location: Abu Dhabi, UAE – Full OnsiteWork Schedule: Full onsite at the client's officeSeniority Level: Consultant / Senior ConsultantKey ResponsibilitiesConduct comprehensive IT risk assessments across enterprise technology environments, IT infrastructure, applications, systems integrations, and AI-driven solutions.Identify, analyze, evaluate, and document technology risks related to Artificial Intelligence (AI), Machine Learning (ML), system integrations, cybersecurity, data protection, and enterprise IT operations.Assess risks associated with AI-powered applications, AI/ML models, automated decision-making systems, and emerging technologies.Evaluate security, operational, and compliance risks arising from system integrations, APIs, third-party platforms, cloud services, and interconnected enterprise applications.Review IT architecture, system designs, data flows, integration frameworks, and technical controls to identify potential vulnerabilities, security gaps, and operational risks.Perform IT risk and control assessments, identify control weaknesses, and recommend appropriate risk mitigation and remediation strategies.Assess AI governance, model risk management, data privacy, security controls, and responsible AI practices in accordance with relevant industry standards.Evaluate IT systems and technology processes against applicable regulatory requirements, internal policies, and recognized IT risk management frameworks.Support IT governance, risk, and compliance (GRC) activities, including risk assessments, control testing, compliance reviews, and audit readiness.Collaborate closely with IT, Cybersecurity, AI/ML Engineering, Enterprise Architecture, Risk Management, and Compliance teams to assess technology-related risks.Review third-party technology solutions, vendor integrations, and external service providers to identify security, compliance, and operational risks.Prepare detailed IT risk assessment reports, risk registers, control gap analyses, remediation recommendations, and management presentations.Monitor risk remediation activities, track identified issues, and support continuous improvement of IT risk management and compliance processes.Experience & Professional QualificationsProven experience as an IT Risk Assessor, IT Risk Consultant, Technology Risk Consultant, IT Risk & Compliance Specialist, or IT GRC Consultant, preferably at Consultant or Senior Consultant level.Strong combination of technical IT knowledge and IT risk management, governance, and regulatory compliance expertise.Demonstrated experience conducting IT risk assessments, technology risk evaluations, security control reviews, and compliance assessments.Strong understanding of Artificial Intelligence (AI), Machine Learning (ML), AI-powered applications, and associated technology risks.Practical experience assessing risks related to systems integration, APIs, enterprise applications, cloud platforms, and interconnected IT environments.Good understanding of AI governance, AI model risks, data privacy, information security, and emerging AI-related regulatory requirements.Familiarity with relevant IT risk, cybersecurity, and governance frameworks, including:ISO 27001 / ISO 27005 – Information Security & Risk ManagementNIST Cybersecurity Framework (CSF)NIST AI Risk Management Framework (AI RMF)ISO/IEC 42001 – Artificial Intelligence Management SystemsCOBIT – IT Governance & Risk ManagementISO 31000 – Enterprise Risk ManagementKnowledge of IT General Controls (ITGC), risk and control assessments (RCSA), security assessments, and regulatory compliance requirements.Understanding of enterprise IT architecture, cloud security, application security, identity and access management, data protection, and third-party technology risks.Experience identifying technology control gaps, evaluating risk exposure, and recommending practical remediation and mitigation measures.Ability to translate complex technical risks into clear business impact assessments, risk reports, and actionable recommendations.Experience working with cross-functional technical, risk, compliance, and business stakeholders.Strong analytical, problem-solving, documentation, reporting, and stakeholder management skills.Previous experience in consulting, enterprise IT risk management, financial services, or other regulated industries is advantageous.Relevant certifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent are advantageous.
التعليقات
لا توجد تعليقات منشورة حتى الآن.