Risk Register Officer

Key Responsibilities:
Initiate & support the annual review of all IT risks in the Risk Register.
Organize with relevant stakeholders the assessment/analysis of identified IT risks (e.g., impact, mitigation).
Organize the validation of IT risks assessment.
Organize compliance activities.
Collect new risk cards and challenge them with relevant stakeholders (e.g., suggested mitigation).
Reporting: Gather feedback regarding the formalization of risk cards & ongoing mitigation measures from risk owners.
Follow KPIs defined in risk cards (mitigation, impact).
Perform reporting about risks and risk mitigation to top management; raise alerts if needed.
Participate in the Business Line Risk committee to share inputs about risks (risks stored in Risk Register, level of risks, impact).

Technical Skills:
Risk monitoring (knowledge in risk management: ability to identify, alert, and suggest remediation).
Risk analysis (ability to anticipate/analyze threats and create risk scenarios) and Risk opinion (ability to challenge, approve, and decide on new activities and projects).
Internal audit knowledge (knowledge of the audit process and methodology).
IT knowledge (global knowledge of IT, its major processes, assets, and solutions) and Cybersecurity (general knowledge in cybersecurity risks, frameworks, and requirements).
Regulatory knowledge (general knowledge in IT and cybersecurity regulatory frameworks) and Compliance (global knowledge of compliance, its major processes, and regulatory frameworks).

#J-18808-Ljbffr