Operational Risk Officer

Accountabilities and Key Roles:Assist in Supervising and ensuring the implementation of Business continuity, Information Security & Operational Risk and related frameworks such as Outsourcing Risk Management, Reputational Risk Management, Strategic Risk Management, and New Product Development frameworks to optimize risk decisions.Assist in assessing work procedures and controls assessment to be implemented by all business lines and units if different from H.O. to identify any business continuity, information security & operational risk related issues.Conduct with the various business areas risk assessment workshops periodically for all AB business units and branches and entering them into the related systems.Ensure compliance with business continuity, information security and operational risk controls frameworks and any related local laws and regulations.Follow-up with all business areas to ensure that any policy implementation issues and control gaps are implemented.Operational RiskFacilitate RCSA, establishment of KRI, and loss reporting along with the implementation of risk related assessment frameworks (eg. Outsourcing, Reputational Risk, Strategic Risk, and Product Development).Implement the operational risk framework and all related Policies & Procedures.Prepare needed reports and analysis.
Business Continuity:Follow up and update service recovery plans.Prepare / update BIA’s for various services.Prepare for / participate in BC related tests.Assure periodic maintenance / health check is conducted for business alternative sites to assure its readiness at all times.
Information SecurityEnsure IS plans, findings & recommendations, along with compliance exceptions reports are addressed and implemented on timely manner in the area.Ensure risk assessment and data classification are conducted on all information assets.Maintain an adequate level of information security awareness in the area.Prepare IS related reports and assessments.
Job Requirements:EducationBachelor’s degree in Business Administration, IT, Finance from a recognized university.
ExperienceMinimum of 5 years experience, 3 of which in information security, business continuity and operational risk field.
CompetenciesClear understanding of information security and operational risk frameworks.Good experience in conducting risk assessments, data classification, RCSA.Good understanding of banking processes and products.Organizational, planning and coordinating skills.Training and presentation skills.Excellent written and verbal communication skills in English and Arabic languages.Excellent writing skills to draft policies, procedures and reports.Ability to concentrate on details, communicating with various types of users, Owning analytical skills.Ability to Plan and execute complex projects spanning multiple locations at the country level. Patience, flexibility, team work.