Information and Communication Technology Risk Analyst

Responsibilities:

- Identify risks related to IT systems (cybersecurity, data loss, system unavailability, third-party risks);

- Perform risk assessments and monitor the effectiveness of ICT controls;

- Analyse incidents and their impact on business processes and critical functions;

- Assess the impact of new systems, products, or changes on ICT risks;

- Identify gaps and opportunities for process improvement;

- Prepare risk analyses, KPIs/KRIs, management reports, and recommendations for senior management;

- Monitor the implementation of mitigation measures and maintain relevant registers (ICT risks, incidents, suppliers, controls);

- Keep up to date with emerging technology risks, regulatory requirements, and industry best practices.

Requirements:

- Higher education in computer science, cybersecurity, mathematics/economics, or a related field;

- At least 2-4 years of professional experience in ICT risk management, IT security, IT audit, compliance, or a similar role (experience in banking or financial services would be considered an advantage);

- Proven practical experience in risk identification, risk assessment, and defining or implementing control measures;

- Understanding of DORA requirements (ICT risk management, incident management, testing, third-party risk, registers) and the PSD2/RTS framework;

- Knowledge of ISO 27001/27002/27005/31000, NIST frameworks (CSF / 800-53 / 800-30), or equivalent standards would be an advantage;

- Understanding of third-party/service provider risk management practices;

- Basic knowledge of IT infrastructure and security, including networks, operating systems (Windows/Linux), AD/IAM/SCA (at least basic level), SIEM, etc.;

- Understanding of vulnerability management and configuration control (hardening baseline);

- High level of accuracy, strong analytical skills, and ability to work independently.

Monthly gross salary from EUR 3,000 to EUR 3,800

If you are ready for new professional challenges and can see yourself growing as part of our team, we’d be delighted to hear from you – please submit your application to [email protected] by March 11, 2026 or

https://cv.lv/lv/vacancy/1515251/bluor-bank-as/informacijas-un-komunikacijas-tehnologijas-risku-analitikis-e?referrer=employer/9904

By submitting your data, you confirm that the information provided is accurate and that you have read and understood the BluOr Bank AS personal data processing policy

https://www.bluorbank.lv/en/information-on-processing-of-personal-data

The purpose of data processing is to evaluate the candidate’s information for the advertised vacancy, as well as to facilitate communication with the candidate.