CD

Assistant Manager / Deputy Manager - IT Risk

Citizens Development Business Finance PLCtopjobs.lk
Oct 21, 2026, 5:40 PM5d ago
Full-timeColombo 10ManagementManager (5+ yrs)

About the role

The Assistant Manager/Deputy Manager - IT Risk will join the Governance Risk and Compliance (GRC) team at Citizens Development Business Finance PLC. The role involves leading IT risk assessments across applications, infrastructure, cloud services, cybersecurity, digital platforms, third-party providers, AI solutions, and emerging technologies. Responsibilities include developing and maintaining IT risk frameworks, registers, dashboards, and reporting mechanisms, providing independent risk oversight, monitoring technology risk exposures, ensuring regulatory compliance, leading business continuity management initiatives, and strengthening technology risk awareness across the organization. Candidates should have a relevant bachelor's degree and at least 5 years of experience in IT risk management or related fields.

Must have

  • A bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering or a related discipline
  • Minimum 5 years of relevant experience in IT Risk Management, Technology Risk, IT Audit, Cyber Risk, Information Security Risk, Operational Resilience or Technology Governance
  • Strong analytical, risk assessment and problem-solving capabilities
  • Excellent communication, stakeholder management and report-writing skills
  • Ability to translate complex technology risks into clear business insights
  • Sound professional judgment, integrity and attention to detail
  • A proactive, independent and results-oriented approach

Nice to have

  • Experience in banking, financial services, FinTech or other regulated industries would be an advantage
  • Sound knowledge of technology risk frameworks and standards including ISO/IEC 27001, ISO 22301, COBIT, and NIST
  • Familiarity with cloud risk, third-party risk, AI governance, emerging technology risk and ISO/IEC 42001 would be an added advantage
  • Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT or relevant ISO Lead Implementer/Auditor certifications would be advantageous

Technologies

  • CISM
  • CISSP
  • Cybersecurity
  • Fintech
  • NIST
  • Responsible AI

Highlights

Application is via email to careers@cdb.lk, with CV and contact details of two non-related referees, and the position indicated in the subject line. Rewards and remuneration are commensurate with qualifications, competencies, and abilities. The company offers a well-defined career path for motivated professionals.