IT Risk Consultant – Saudi Financial Services

About the role

We are looking for a senior IT Risk Consultant to lead a comprehensive assessment of our critical business applications and supporting IT infrastructure. The role focuses on identifying risks, closing control gaps, and strengthening the organization’s overall IT risk posture within the Saudi financial services sector.

Key responsibilities

• Develop an IT Risk Management Framework aligned with enterprise risk and Saudi regulatory requirements.
• Conduct enterprise‑wide IT risk assessments for applications, systems, and infrastructure.
• Identify, assess, and document technology, security, operational, data, and third‑party risks.
• Create detailed application‑level and enterprise‑level risk registers.
• Perform control gap analyses and produce risk heat maps, dashboards, and executive reports.
• Design a prioritized remediation roadmap with timelines and resource estimates.
• Collaborate with IT, cybersecurity, risk, compliance, and business stakeholders to validate findings.
• Provide weekly progress updates and status reports.

Required profile

• Minimum 8 years of hands‑on experience in IT Risk Management or related fields.
• Proven experience in the financial services and capital markets sector in Saudi Arabia.
• Deep understanding of Saudi regulatory frameworks (CMA, Tadawul, NCA, SAMA ITGF, PDPL, NDMO).
• Extensive exposure to complex technology environments, including trading platforms, OMS, API gateways, middleware, web/mobile applications, and market integrations.

Required skills

• Trading platforms
• Order Management Systems (OMS)
• API gateways and integration layers
• Middleware components
• Web and mobile applications
• FIX protocol
• EDA A integration
• Financial transaction processing systems
• Integration platforms