IT Risk Register Officer

IT Risk Register Officer

Portugal

Decskill was founded in 2014 as an IT Consulting Company and their main mission is to delivery value through the knowledge. We enable companies to meet the chalenges of digital world by providing our clients with business models that ensure technological capacity, flexibility and agility. We are more than 500 consultants with offices in Lisbon, Porto and Madrid.

DECSKILL operates in 3 main areas:

• DECSKILL TALENT, through which we provide our clients with an extension to their IT teams;

• DECSKILL BOOST, through which we provide our client with software development models to increase capacity and optimize Time-to-Market, where we create and manage teams that deliver according to their needs, at the desired speed;

• DECSKILL CONNECT through which we provide our client with consulting services, as well as the implementation and management of information technology infrastructures.

Our practice results in the creation of value for our customers, either by delivering qualified and
- added services, or through highly qualified and motivated professionals, as well as technology solutions that allow us to operate and transform the business of our customers.

We are looking for an IT Risk Register Officer!

Responsibilities:

Management of the Risk Register:

• Regularly update IT risks criteria over time (risk category, owner, impact…).
• Initiate & support the annual review of all IT risks in the Risk Register tool.

Support risk assessment:

• Organize with relevant stakeholders the assessment/analysis about identified IT risks (e. g. : impact, mitigation…).
• Organize the validation of IT risks assessment.
• Organize the compliance with the BNPP IT Risk Management Procedure.
• Collect new risk cards and challenge them with relevant stakeholders (e. g. : mitigation suggested).

Reporting:

• Gather feedback regarding formalization of risk cards & ongoing mitigation measures from risk owners.
• Follow KPI defined in risk cards (due date, risk level…).
• Perform reports about risks and remediations to the top management, raise alerts if needed.
• Participate to the Business Line Risk committee to share inputs about risks (risks stored in Risk Register tool, level of risks, category, treatment…).

Requirements:

• IT knowledge (global knowledge of IT, its major processes, and assets & solutions) and Cybersecurity (general knowledge in cybersecurity risks, frameworks, and requirements).
• Risk monitoring (knowledge in risk management: ability to identify, alert and suggest remediation).
• Risk analysis (ability to anticipate/analyse threats and create risk scenario) and Risk opinion (ability to challenge, approve and decide new activities, projects…).
• Internal audit knowledge (knowledge of the audit process and methodology).
• Regulatory (general knowledge in IT and cybersecurity regulators framework) and Compliance (global knowledge of compliance, its major processes or regulatory framework).
• Problem Solving and critical thinking.
• Good communication skills.
• Team work and collaboration.
• Ability to work independently and collaboratively in a team.
• Proactive and flexible approach to dealing with challenges.
• Good Level of english.

If you’re interested in this job, please send your CV to cesaltina. abreu@decskill.com with reference “CA/ITRisk
Register
Officer"

Thank You! ?

Decskill is committed to equality and
- discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.