Senior Technology and Cyber Risk Officer

About the role

The Senior Technology and Cyber Risk Officer will lead the assessment and management of technology and cybersecurity risks across the bank. You will develop policies, monitor risk indicators, and work closely with multiple functions to ensure a robust risk posture.

Key responsibilities

• Conduct technology and cybersecurity risk assessments to identify vulnerabilities, threats, and control weaknesses.
• Develop, maintain, and enhance risk management policies, frameworks, and procedures.
• Establish and monitor Key Risk Indicators (KRIs), risk appetite, thresholds, and reporting mechanisms.
• Collaborate with IT, Cybersecurity, Digital, Business Units, Compliance, Internal Audit and other stakeholders to identify, assess, treat, and monitor risks.
• Provide training, guidance and risk awareness to employees and relevant stakeholders.
• Perform other duties as assigned by management.

Required profile

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Risk Management or related field.
• 3‑5 years of experience in technology risk, cybersecurity risk, IT audit, information security, operational risk, or technology governance, preferably in banking or financial services.
• Relevant certifications such as CISSP, EEH, CISM or GIAC are preferred.
• Knowledge of compliance frameworks (ISO 27001, NIST, GDPR, PCI‑DSS) and banking regulatory requirements.
• Strong understanding of risk identification, assessment, treatment, monitoring and reporting.
• Excellent English communication skills and ability to work in a team.

Required skills

• ISO 27001, NIST, GDPR, PCI‑DSS frameworks
• CISSP, EEH, CISM, GIAC certifications
• IT infrastructure, cloud environments, digital banking platforms
• Cybersecurity threat analysis, vulnerability management, technology controls