IT Risk Officer
- Hiring from
- Cyprus
- Work type
- Hybrid
- Posted
626,743 remote jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
Job Description
HFM is an internationally acclaimed multi-asset broker, delivering
cutting-edge trading tools, platforms, and conditions to traders worldwide. We
are committed to innovation, transparency, and excellence in the financial
markets. As we continue to expand, we are seeking a driven and strategic IT Risk Officer to join our team.
Your role at HFM:
The IT Risk Officer, part of the IT GRC team, is responsible for identifying, assessing, monitoring, and reporting IT-related risks across the organization. The role focuses on IT risk management activities, including conducting risk assessments, maintaining the IT risk register, tracking mitigation actions, and enhancing the organization’s risk posture. In addition, the Officer supports broader IT GRC responsibilities assigned by the Team Leader, such as governance documentation, policy updates, audit preparation, and compliance coordination. The Officer works closely with internal teams to strengthen controls, improve risk visibility, and advance the IT GRC function’s maturity.
- Conduct
regular IT risk assessments and maintain the IT risk register.
- Review
and maintain existing IT risk methodologies, scoring criteria, and control
frameworks.
- Identify,
assess, and monitor IT-related risks in line with the organization’s risk
appetite and regulatory requirements.
- Support
the implementation of IT risk treatment plans and follow up on mitigation
progress.
- Review
new projects, systems, and vendors to identify potential technology risks
early in their lifecycle.
- Coordinate
with internal teams to ensure risk mitigation actions are effectively
implemented.
- Maintain
documentation and evidence supporting IT risk assessments, treatment
actions, and management reporting.
- Participate in annual audits for IT-risk-related
activities by providing evidence, explanations, and documentation.
- Support
regulatory, internal, and external audit requests specifically related to
IT risks.
- Contribute
to the continuous improvement of the IT risk management process and its
integration into daily operations.
- Perform additional IT GRC tasks assigned by the
Team Leader, such as supporting policy updates, compliance support, or
governance documentation, as needed.
Requirements
- BSc in IT, Cybersecurity, Risk Management, or a related field.
- At least 2 years of experience in IT Risk, Information Security, or IT Audit.
- Strong understanding of risk management frameworks such as ISO 27005 or DORA.
- Experience with risk assessment and mitigation, including maintaining risk registers.
- Strong analytical, organizational, and reporting skills.
- Excellent communication and coordination skills across technical and non-technical teams.
- Relevant professional certifications such as CRISC, CISA, or ISO 27001 Lead Implementer will be considered an advantage.
**Resumes submitted must be in English.
Benefits
- Hybrid
Work Model (2 days working from home)
- Wolt
Meal Allowance
- Comprehensive
Health Insurance
- Provident
Fund (Upon completion of the trial period)
- Summer
Short Fridays (August)
- Additional
Paid Annual Leave (up to 30 days, based on years of
service)
- Birthday
Leave
- Udemy
Business access
- Gym
Membership
- Referral
Bonus Program
Additional Support
- Visa
Sponsorship and Relocation Assistance
Sounds
like you? Let’s write the next chapter together!
All
Applications will be handled with the strictest
confidentiality.
