Assistant Manager / Deputy Manager - IT Risk
About the role
The role of Assistant Manager / Deputy Manager - IT Risk at Citizens Development Business Finance PLC involves leading IT risk assessments across various domains such as applications, infrastructure, cloud services, cybersecurity, and emerging technologies. The position is responsible for developing and maintaining IT risk frameworks, registers, and dashboards, providing independent risk oversight, monitoring technology risk exposures, ensuring regulatory compliance, and leading business continuity management initiatives. The ideal candidate will have a relevant bachelor's degree and at least 5 years of experience in IT risk management or related fields. The company offers a dynamic work environment within a renowned financial entity, with rewards and remuneration based on qualifications and performance. Applications are to be sent via email with the required details.
Must have
- A bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering or a related discipline
- Minimum 5 years of relevant experience in IT Risk Management, Technology Risk, IT Audit, Cyber Risk, Information Security Risk, Operational Resilience or Technology Governance
- Strong analytical, risk assessment and problem-solving capabilities
- Excellent communication, stakeholder management and report-writing skills
- Ability to translate complex technology risks into clear business insights
- Sound professional judgment, integrity and attention to detail
- A proactive, independent and results-oriented approach
Nice to have
- Experience in banking, financial services, FinTech or other regulated industries would be an advantage
- Sound knowledge of technology risk frameworks and standards including ISO/IEC 27001, ISO 22301, COBIT, and NIST
- Familiarity with cloud risk, third-party risk, AI governance, emerging technology risk and ISO/IEC 42001 would be an added advantage
- Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT or relevant ISO Lead Implementer/Auditor certifications would be advantageous
Technologies
- CISM
- CISSP
- Cybersecurity
- Fintech
- NIST
- Responsible AI
Highlights
Applicants are required to email their CV with contact details of two non-related referees to careers@cdb.lk, indicating the position applied for in the subject line. Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT, or relevant ISO Lead Implementer/Auditor certifications would be advantageous. Experience in banking, financial services, FinTech, or other regulated industries is considered a plus.