IT Risk Officer

HFM is an internationally acclaimed multi-asset broker, delivering cutting-edge trading tools, platforms, and conditions to traders worldwide. We are committed to innovation, transparency, and excellence in the financial markets. As we continue to expand, we are seeking a driven and strategic IT Risk Officer to join our team.

Your role

at HFM: The IT Risk Officer, part of the IT GRC team, is responsible for identifying, assessing, monitoring, and reporting IT-related risks across the organization.

The role

focuses on IT risk management activities, including conducting risk assessments, maintaining the IT risk register, tracking mitigation actions, and enhancing the organization’s risk posture. In addition, the Officer supports broader IT GRC responsibilities assigned by the Team Leader, such as governance documentation, policy updates, audit preparation, and compliance coordination. The Officer works closely with internal teams to strengthen controls, improve risk visibility, and advance the IT GRC function’s maturity.

Conduct regular IT risk assessments and maintain the IT risk register. Review and maintain existing IT risk methodologies, scoring criteria, and control frameworks. Identify, assess, and monitor IT-related risks in line with the organization’s risk appetite and regulatory requirements. Support the implementation of IT risk treatment plans and follow up on mitigation progress. Review new projects, systems, and vendors to identify potential technology risks early in their lifecycle.

Coordinate with internal teams to ensure risk mitigation actions are effectively implemented. Maintain documentation and evidence supporting IT risk assessments, treatment actions, and management reporting. Participate in annual audits for IT-risk-related activities by providing evidence, explanations, and documentation. Support regulatory, internal, and external audit requests specifically related to IT risks. Contribute to the continuous improvement of the IT risk management process and its integration into daily operations.

Perform additional IT GRC tasks assigned by the Team Leader, such as supporting policy updates, compliance support, or governance documentation, as needed. Requirements BSc in IT, Cybersecurity, Risk Management, or a related field. At least 2 years of experience in IT Risk, Information Security, or IT Audit. Strong understanding of risk management frameworks such as ISO 27005 or DORA. Experience with risk assessment and mitigation, including maintaining risk registers.

Strong analytical, organizational, and reporting skills. Excellent communication and coordination skills across technical and non-technical teams. Relevant professional certifications such as CRISC, CISA, or ISO 27001 Lead Implementer will be considered an advantage. **Resumes submitted must be in English. Benefits Hybrid Work Model (2 days working from home) Wolt Meal Allowance Comprehensive Health Insurance Provident Fund (Upon completion of the trial period) Summer Short Fridays (August) Additional Paid Annual Leave (up to 30 days, based on years of service) Birthday Leave Udemy Business access Gym Membership Referral Bonus Program Additional Support Visa Sponsorship and Relocation Assistance Sounds like you?

Let’s write the next chapter together! All Applications will be handled with the strictest confidentiality.