Job Description
Assistant Manager/ Deputy Manager – IT Risk
We seek a highly motivated and results-driven professional to join our GRC (Governance Risk and Compliance) team as Assistant Manager/Deputy Manager – IT Risk
Key Responsibilities
- Lead IT risk assessments across applications, infrastructure, cloud services, cybersecurity, digital platforms, third-party providers, AI solutions, and emerging technologies
- Develop and maintain IT risk frameworks, risk registers, Key Risk Indicators (KRIs), dashboards, and reporting mechanisms
- Provide independent risk oversight and challenge on technology projects, digital transformation initiatives, system implementations, and AI adoption
- Monitor technology risk exposures, incidents, audit findings, control weaknesses, and remediation progress
- Ensure alignment with regulatory requirements, industry standards, and technology risk management best practices
- Lead Business Continuity Management (BCM) initiatives, including business impact assessments, continuity testing, and recovery readiness reviews
- Support information security risk assessments and monitoring under the Information Security Management System (ISMS)
- Strengthen technology risk awareness and foster a proactive risk management culture across the organization
Qualifications and Experience
- A bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering or a related discipline
- Minimum 5 years of relevant experience in IT Risk Management, Technology Risk, IT Audit, Cyber Risk, Information Security Risk, Operational Resilience or Technology Governance
- Experience in banking, financial services, FinTech or other regulated industries would be an advantage
- Sound knowledge of technology risk frameworks and standards including ISO/IEC 27001, ISO 22301, COBIT, and NIST
- Familiarity with cloud risk, third-party risk, AI governance, emerging technology risk and ISO/IEC 27001, ISO 22301, COBIT and NIST guidelines would be advantageous
- Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT or relevant ISO Lead Implementer/Auditor certifications would be advantageous
- Strong communication and stakeholder management skills
- Ability to translate complex technology risks into clear business insights
- A proactive, independent and results-oriented approach
Key Skills and Attributes
- Strong analytical, risk assessment and problem-solving capabilities
- Excellent communication, stakeholder management and report-writing skills
- Ability to translate complex technology risks into clear business insights
- Sound professional judgment, integrity and attention to detail
- A proactive, independent and results-oriented approach
Rewards and remuneration commensurate with qualifications, competencies and abilities, along with a well-defined career path for those with ambition, motivation, and a willingness to perform.
Please e-mail your CV together with contact details of two non-related referees indicating the position applied for in the 'Subject' line of the e-mail to careers@cdb.lk