We are seeking a highly experienced IT Risk Consultant to perform a comprehensive assessment of the organization’s critical business applications and the supporting IT infrastructure. The consultant will evaluate current risks, identify control gaps, and recommend enhancements to strengthen company's overall IT risk posture.

Responsibilities

• Develop an IT Risk Management Framework and Methodology that aligns with Enterprise Risk Management Framework and complies with applicable Saudi regulatory requirements, including CMA, Tadawul, NCA, SAMA ITGF, NDMO, and PDPL
• Conduct comprehensive IT risk assessments covering all in-scope applications, systems, and supporting infrastructure, ensuring thorough evaluation of inherent and residual risks
• Identify, assess, and document IT risks, including technology, security, operational, data, and third‑party risks, using structured and defensible assessment techniques
• Develop detailed applica...