IT Risk Control Analyst at Credit Direct

• Conduct comprehensive risk assessments of IT systems, applications, and processes.
• Identify potential vulnerabilities and threats to IT infrastructure.
• Evaluate the effectiveness of existing controls and recommend improvements.

Risk Mitigation:

• Develop and implement strategies to mitigate identified risks.
• Collaborate with IT and business units to ensure risk mitigation measures are integrated into daily operations.
• Monitor and report on the status of risk mitigation efforts.

Compliance and Regulatory Adherence:

• Ensure compliance with relevant regulatory requirements and industry standards (e.g., NIST, ISO 27001, COBIT).
• Conduct regular audits to ensure adherence to IT risk management policies and procedures.
• Stay updated on regulatory changes and emerging threats.

Incident Management:

• Respond to IT security incidents and breaches.
• Conduct root cause analysis and develop action plans to prevent recurrence.
• Coordinate with external agencies and stakeholders during major incidents.

Reporting and Documentation:

• Prepare detailed reports on risk assessments, audit findings, and incident responses.
• Maintain comprehensive documentation of risk management activities.
• Communicate findings and recommendations to senior management and stakeholders.

Training and Awareness:

• Develop and deliver training programs to enhance awareness of IT risk management practices.
• Promote a culture of risk awareness and proactive risk management within the organization.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, ITIL, COBIT or equivalent.
• Minimum of 2-4 years of experience in IT risk management, IT audit, or cybersecurity.
• Prior experience working in the financial sector in Nigeria.
• Familiarity with Nigerian financial regulations and compliance requirements.

COMPETENCIES REQUIREMENTS:

Technical:

• Strong understanding of IT risk management frameworks and standards (e.g., NIST, ISO 27001, COBIT).
• Excellent analytical and problem-solving skills.
• Strong communication and report-writing skills.

Behavioural:

• Ability to work independently and as part of a team.
• High level of integrity and ethical standards.

What to Expect in the Hiring Process:

• A preliminary phone call with the recruiter
• Technical interview
• Assessment
• Interview with Senior members of the team
• Cultural and Behavioural Fit Interview with a member of the Executive team.