Skill Inventory Matrix
Enabler for Internal Mobility Program
Records
| ID | Sector | Division | Department | Unit | Technical Skills |
|---|---|---|---|---|---|
| 955 | Risk Management | ||||
| 956 | Risk Management | Credit Risk | Knowledge of end-to-end credit risk frameworks, including credit policy development, risk exposure assessment, and mitigation strategies. | ||
| 957 | Risk Management | Credit Risk | Knowledge of retail and non-retail portfolio management practices. | ||
| 958 | Risk Management | Credit Risk | Ability to develop, calibrate, and maintain credit risk models. | ||
| 959 | Risk Management | Credit Risk | Ability to design and implement credit decision-making models. | ||
| 960 | Risk Management | Credit Risk | Ability to manage collection and recovery strategies using automated tools, dialer systems, and performance-based agency models to reduce delinquency and loss rates. | ||
| 961 | Risk Management | Credit Risk | Ability to use MS Excel for credit risk analysis. | ||
| 962 | Risk Management | Credit Risk | Credit Policy & Underwriting | Knowledge of credit risk policy development and underwriting standards. | |
| 963 | Risk Management | Credit Risk | Credit Policy & Underwriting | Knowledge of digital tools and emerging technologies. | |
| 964 | Risk Management | Credit Risk | Credit Policy & Underwriting | Knowledge of delinquency management frameworks and loss mitigation strategies. | |
| 965 | Risk Management | Credit Risk | Credit Policy & Underwriting | Knowledge of automated collections platforms, including auto-dialers and risk-based treatment strategies. | |
| 966 | Risk Management | Credit Risk | Credit Policy & Underwriting | Ability to navigate core banking systems such as T24 and interpret IFRS guidelines. | |
| 967 | Risk Management | Credit Risk | Credit Policy & Underwriting | Ability to apply a digital mindset in optimizing credit workflows, leveraging analytics, and enhancing customer experience through automation. | |
| 968 | Risk Management | Credit Risk | Credit Policy & Underwriting | Ability to assess and manage portfolio-level credit risk through segmentation, stress testing, and early warning indicators. | |
| 969 | Risk Management | Credit Risk | Credit Policy & Underwriting | Ability to operate and configure Credit Management Systems (CMS). | |
| 970 | Risk Management | Credit Risk | Portfolio Management & Analytics | Knowledge of portfolio risk management principles and stress testing methodologies. | |
| 971 | Risk Management | Credit Risk | Portfolio Management & Analytics | Knowledge of Credit Management Systems (CMS) to support credit risk assessment, automated decisioning, and workflow optimization. | |
| 972 | Risk Management | Credit Risk | Portfolio Management & Analytics | Knowledge of T24 core banking system functionalities and IFRS standards to ensure compliance in credit accounting and provisioning. | |
| 973 | Risk Management | Credit Risk | Portfolio Management & Analytics | Ability to apply a digital mindset by adopting technology and data tools to enhance credit risk processes and decision-making. | |
| 974 | Risk Management | Credit Risk | Portfolio Management & Analytics | Ability to manage delinquency trends and apply loss mitigation strategies. | |
| 975 | Risk Management | Credit Risk | Portfolio Management & Analytics | Ability to utilize MS Excel and Power BI to conduct credit risk analytics, develop dashboards, and monitor portfolio performance. | |
| 976 | Risk Management | Market & ALM Risk | Knowledge of Interest Rate Risk in the Banking Book (IRRBB) and broader market risk management principles in line with regulatory expectations. | ||
| 977 | Risk Management | Market & ALM Risk | Knowledge of liquidity and market risk frameworks. | ||
| 978 | Risk Management | Market & ALM Risk | Knowledge of Counterparty Credit Risk (CCR) and Credit Valuation Adjustment (CVA) methodologies. | ||
| 979 | Risk Management | Market & ALM Risk | Knowledge of Basel III and IFRS standards. | ||
| 980 | Risk Management | Market & ALM Risk | Ability to conduct stress testing and scenario analysis for evaluating asset-liability management (ALM) and market risk exposures. | ||
| 981 | Risk Management | Market & ALM Risk | Ability to utilize MS Excel for risk analytics, data modeling, and generating regulatory reports. | ||
| 982 | Risk Management | Market & ALM Risk | Market Risk | Knowledge of market risk management frameworks, policies, and regulatory expectations. | |
| 983 | Risk Management | Market & ALM Risk | Market Risk | Knowledge of liquidity risk management principles and integration with the broader market risk framework. | |
| 984 | Risk Management | Market & ALM Risk | Market Risk | Knowledge of regulatory market risk reporting standards (e.g., SAMA, Basel III) | |
| 985 | Risk Management | Market & ALM Risk | Market Risk | Ability to use Excel and risk systems for portfolio risk analytics, market risk exposure tracking, and scenario simulations. | |
| 986 | Risk Management | Market & ALM Risk | Market Risk | Ability to monitor and escalate breaches in market risk limits and ensure adherence to approved market risk appetite parameters. | |
| 987 | Risk Management | Market & ALM Risk | Market Risk | Ability to implement and enhance risk monitoring processes, control systems, and documentation aligned with internal policies and regulatory requirements. | |
| 988 | Risk Management | Market & ALM Risk | ALM Risk | Knowledge of liquidity risk management frameworks and regulatory guidelines. | |
| 989 | Risk Management | Market & ALM Risk | ALM Risk | Knowledge of Contingency Funding Planning (CFP) including identification and activation of early warning indicators and funding options under stress scenarios. | |
| 990 | Risk Management | Market & ALM Risk | ALM Risk | Knowledge of ILAAP framework implementation aligned with SAMA standards for both business-as-usual and stress conditions. | |
| 991 | Risk Management | Market & ALM Risk | ALM Risk | Knowledge of hedging strategies and market risk mitigation techniques, with ability to assess risk impact prior to ALCO execution. | |
| 992 | Risk Management | Market & ALM Risk | ALM Risk | Ability to monitor, control, and report the Bank’s liquidity and funding positions to SAMA and internal committees (ALCO, RMC) with accuracy and timeliness. | |
| 993 | Risk Management | Enterprise Risk Management | Knowledge of enterprise risk management (ERM) frameworks aligned with ISO 31000, SAMA and Basel III. | ||
| 994 | Risk Management | Enterprise Risk Management | Knowledge of capital planning methodologies, risk-weighted asset (RWA) computation, and application of ICAAP and ILAAP frameworks in compliance with Basel III standards. | ||
| 995 | Risk Management | Enterprise Risk Management | Ability to produce regulatory and internal risk reports using data visualization tools such as Power BI and Tableau. | ||
| 996 | Risk Management | Enterprise Risk Management | Ability to use Python, Power BI, and MS Excel to develop, validate, and maintain credit, market, and operational risk models including PD, LGD, EAD, and Value at Risk (VaR). | ||
| 997 | Risk Management | Enterprise Risk Management | Ability to design and execute macro-financial stress tests and scenario analyses | ||
| 998 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Knowledge of enterprise risk strategy development and its alignment with organizational objectives. | |
| 999 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Knowledge of risk governance frameworks and regulatory compliance standards, including Basel III and SAMA requirements. | |
| 1000 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Knowledge of risk culture development techniques and ability to lead initiatives that promote enterprise-wide risk awareness. | |
| 1001 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Ability to work on MS Excel, Python, and Power BI for advanced risk analytics, dashboard creation, and data visualization. | |
| 1002 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Ability to perform risk modeling and conduct stress testing across liquidity, credit, and market risk domains. | |
| 1003 | Risk Management | Enterprise Risk Management | Enterprise Risk Strategy, Framework and Culture | Ability to support capital adequacy planning and implement ICAAP frameworks for comprehensive, risk-based capital assessment. | |
| 1004 | Risk Management | Enterprise Risk Management | Risk Modeling And Analytics | Knowledge of risk governance frameworks and regulatory compliance requirements, including Basel III, SAMA guidelines, and internal control systems. | |
| 1005 | Risk Management | Enterprise Risk Management | Risk Modeling And Analytics | Knowledge of Basel III and ICAAP models to evaluate capital requirements and risk-weighted asset calculations. | |
| 1006 | Risk Management | Enterprise Risk Management | Risk Modeling And Analytics | Ability to design and execute advanced risk models and stress testing scenarios across liquidity, credit, and market risk domains. | |
| 1007 | Risk Management | Enterprise Risk Management | Risk Modeling And Analytics | Ability to lead capital adequacy planning and implement ICAAP frameworks to support risk-informed strategic decisions. | |
| 1008 | Risk Management | Enterprise Risk Management | Risk Modeling And Analytics | Ability to analyze and visualize risk data using MS Excel, Python, and Power BI for enhanced decision-making and reporting accuracy. | |
| 1009 | Risk Management | Enterprise Risk Management | Capital Management | Knowledge of capital adequacy frameworks, including Pillar I, Pillar II, and Pillar III under Basel III guidelines. | |
| 1010 | Risk Management | Enterprise Risk Management | Capital Management | Ability to perform data cleansing, consolidation, and analysis for on- and off-balance sheet exposures across Corporate, Retail, Treasury, Staff Loans, and Financial Institutions. | |
| 1011 | Risk Management | Enterprise Risk Management | Capital Management | Ability to compute and track capital ratios, ensuring timely updates on a weekly, monthly, and quarterly basis. | |
| 1012 | Risk Management | Enterprise Risk Management | Capital Management | Ability to prepare MIS, ad hoc reports, and presentations for management committees related to capital adequacy. | |
| 1013 | Risk Management | Enterprise Risk Management | Capital Management | Ability to maintain structured, audit-ready documentation for capital adequacy processes, supporting both internal and external audit and regulatory reviews. | |
| 1014 | Risk Management | Operational & Resiliency Risk | Knowledge of Operational Risk Control and Self-Assessment (RCSA) frameworks. | ||
| 1015 | Risk Management | Operational & Resiliency Risk | Knowledge of outsourcing risk evaluation processes, third-party risk management, and vendor control assessments. | ||
| 1016 | Risk Management | Operational & Resiliency Risk | Ability to conduct business continuity planning (BCP), disaster recovery testing, and resilience assessments across critical operations. | ||
| 1017 | Risk Management | Operational & Resiliency Risk | Ability to apply Basel III and SAMA guidelines for operational risk governance, loss event reporting, and compliance monitoring. | ||
| 1018 | Risk Management | Operational & Resiliency Risk | Ability to use MS Excel and Power BI for operational risk analytics, reporting, and visualization of risk trends and heat maps. | ||
| 1019 | Risk Management | Operational & Resiliency Risk | Operational Risk | Knowledge of operational risk frameworks, including RCSA, KRI monitoring, and Basel III/SAMA compliance. | |
| 1020 | Risk Management | Operational & Resiliency Risk | Operational Risk | Knowledge of risk assessment tools and control effectiveness evaluation for new products, services, and processes. | |
| 1021 | Risk Management | Operational & Resiliency Risk | Operational Risk | Knowledge of operational risk capital modeling, stress testing, and scenario analysis. | |
| 1022 | Risk Management | Operational & Resiliency Risk | Operational Risk | Ability to design and manage dashboards for operational risk analytics and regulatory submissions. | |
| 1023 | Risk Management | Operational & Resiliency Risk | Operational Risk | Ability to implement and govern operational risk policies, procedures, and risk appetite limits. | |
| 1024 | Risk Management | Operational & Resiliency Risk | Operational Risk | Ability to track and escalate risk events and breaches, ensuring timely reporting and remediation. | |
| 1025 | Risk Management | Operational & Resiliency Risk | Operational Risk | Ability to use MS Excel and Power BI for analytics and reporting. | |
| 1026 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Knowledge of resiliency risk management frameworks aligned with Basel III, SAMA, and ISO 22301 standards. | |
| 1027 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Knowledge of structured incident response frameworks, escalation protocols, and post-incident assessments. | |
| 1028 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Knowledge of regulatory reporting standards and documentation requirements related to resiliency and continuity. | |
| 1029 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Ability to use MS Excel and Power BI for analytics and reporting. | |
| 1030 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Ability to design, implement, and monitor business continuity and disaster recovery (BC/DR). | |
| 1031 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Ability to conduct simulations, scenario testing, and crisis response exercises to evaluate operational resilience. | |
| 1032 | Risk Management | Operational & Resiliency Risk | Resiliency Risk | Ability to coordinate with IT, compliance, and business units to embed resiliency in enterprise risk governance. | |
| 1033 | Risk Management | Business Continuity Management | Knowledge of Business Impact Analysis (BIA) and operational risk assessment methodologies. | ||
| 1034 | Risk Management | Business Continuity Management | Knowledge of Disaster Recovery Planning (DRP) and incident response strategies. | ||
| 1035 | Risk Management | Business Continuity Management | Knowledge of crisis management and DRP tools to manage disruptive events and ensure recovery readiness. | ||
| 1036 | Risk Management | Business Continuity Management | Ability to use Business Continuity Management Planning systems and simulation testing platforms. | ||
| 1037 | Risk Management | Business Continuity Management | Ability to use MS Excel for analyzing BIA data and assessing risk impacts. | ||
| 1038 | Risk Management | Business Continuity Management | BCM Governance | Knowledge of SAMA Business Continuity Management (BCM) frameworks, ISO 22301 standards, and regulatory compliance requirements. | |
| 1039 | Risk Management | Business Continuity Management | BCM Governance | Knowledge of incident management processes, including notification systems, root cause analysis, and corrective/preventive action planning. | |
| 1040 | Risk Management | Business Continuity Management | BCM Governance | Knowledge of crisis management frameworks, communication protocols, and emergency response. | |
| 1041 | Risk Management | Business Continuity Management | BCM Governance | Ability to design, execute, and document BCM exercises, red teaming scenarios, and post-incident reviews. | |
| 1042 | Risk Management | Business Continuity Management | BCM Governance | Ability to use MS Excel for analyzing BIA data and assessing risk impacts. | |
| 1043 | Risk Management | Business Continuity Management | BCM Governance | Ability to develop and maintain BCM governance documentation. | |
| 1044 | Risk Management | Business Continuity Management | BCM Planning | Knowledge of Business Impact Analysis (BIA) and operational risk assessment methodologies. | |
| 1045 | Risk Management | Business Continuity Management | BCM Planning | Knowledge of Disaster Recovery Planning (DRP) and incident response strategies. | |
| 1046 | Risk Management | Business Continuity Management | BCM Planning | Knowledge of crisis management and DRP tools to manage disruptive events and ensure recovery readiness. | |
| 1047 | Risk Management | Business Continuity Management | BCM Planning | Knowledge of Business Continuity Management Planning systems and simulation testing platforms. | |
| 1048 | Risk Management | Business Continuity Management | BCM Planning | Knowledge of SAS software and ISO 22301 standards for business continuity compliance and best practices. | |
| 1049 | Risk Management | Business Continuity Management | BCM Planning | Ability to use MS Excel for analyzing BIA data and assessing risk impacts. | |
| 1050 | Risk Management | Risk Governance & Controls | Knowledge of risk governance frameworks and regulatory compliance standards aligned with ISO 31000, Basel III, and SAMA guidelines. | ||
| 1051 | Risk Management | Risk Governance & Controls | Knowledge of enterprise risk management (ERM) and internal control frameworks. | ||
| 1052 | Risk Management | Risk Governance & Controls | Knowledge of operational and resiliency risk assessment methodologies to support integrated risk reviews and planning. | ||
| 1053 | Risk Management | Risk Governance & Controls | Ability to track audit observations, monitor compliance gaps, and evaluate the effectiveness. | ||
| 1054 | Risk Management | Risk Governance & Controls | Ability to use MS Excel, Power BI, and Python for conducting advanced risk data analysis, trend visualization, and executive-level reporting. | ||
| 1055 | Risk Management | Risk Governance & Controls | Ability to apply project management tools such as JIRA, Agile, and Waterfall. | ||
| 1056 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Knowledge of risk governance frameworks in accordance with SAMA, Basel III, and ISO 31000 standards. | |
| 1057 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Knowledge of regulatory gap analysis techniques and enterprise-level risk mitigation strategies. | |
| 1058 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Knowledge of scenario analysis and stress testing frameworks. | |
| 1059 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Ability to prepare and align regulatory and board-level risk reports. | |
| 1060 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Ability to conduct and oversee Risk Control Self-Assessments (RCSA), Key Risk Indicator (KRI) monitoring, and regulatory compliance tracking. | |
| 1061 | Risk Management | Risk Governance & Controls | Risk Governance, Control and Reporting | Ability to develop, interpret, and maintain automated risk dashboards and reports. | |
| 1062 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Knowledge of risk system architecture, including integration and enhancement of GRC platforms, automated reporting tools, and AI-driven monitoring. | |
| 1063 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Knowledge of regulatory compliance requirements (SAMA, Basel III, ISO 31000). | |
| 1064 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Knowledge of AI, machine learning, and Python applications in automating risk analytics and reporting dashboards. | |
| 1065 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Knowledge of risk data governance, documentation practices, and audit procedures for system control assurance. | |
| 1066 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Ability to manage enterprise risk system (RMS) projects. | |
| 1067 | Risk Management | Risk Governance & Controls | Risk Systems and Project Management | Ability to ensure 99.99% data accuracy through advanced analytics, automation, and structured reporting frameworks. | |
| 1068 | Risk Management | Cybersecurity | Knowledge of cybersecurity governance frameworks, including NCA, SAMA, ISO 27001, and global best practices. | ||
| 1069 | Risk Management | Cybersecurity | Knowledge of cybersecurity risk assessments, third-party risk management practices, and contractual security requirements. | ||
| 1070 | Risk Management | Cybersecurity | Knowledge of Governance, Risk, and Compliance (GRC) tools for tracking policy adherence, compliance obligations, and third-party risks. | ||
| 1071 | Risk Management | Cybersecurity | Ability to design cybersecurity metrics and reporting dashboards that support continuous improvement of governance frameworks. | ||
| 1072 | Risk Management | Cybersecurity | Ability to develop, implement, and monitor cybersecurity policies. | ||
| 1073 | Risk Management | Cybersecurity | Ability to apply data classification standards, implement access controls, and generate data leakage prevention (DLP) reports. | ||
| 1074 | Risk Management | Cybersecurity | Cybersecurity GRC | Knowledge of cybersecurity governance strategy in line with NCA, SAMA, ISO 27001, and organizational objectives. | |
| 1075 | Risk Management | Cybersecurity | Cybersecurity GRC | Knowledge of data classification protocols, access control implementation, and data leakage prevention monitoring. | |
| 1076 | Risk Management | Cybersecurity | Cybersecurity GRC | Knowledge of project governance principles, including planning, tracking, resource allocation, and risk-based prioritization. | |
| 1077 | Risk Management | Cybersecurity | Cybersecurity GRC | Knowledge of incident response governance integration. | |
| 1078 | Risk Management | Cybersecurity | Cybersecurity GRC | Ability to design cybersecurity awareness and training programs. | |
| 1079 | Risk Management | Cybersecurity | Cybersecurity GRC | Ability to lead regulatory engagement and ensure timely reporting and compliance with SAMA, NCA, and global cybersecurity standards. | |
| 1080 | Risk Management | Cybersecurity | Cybersecurity GRC | Ability to conduct cybersecurity risk assessments and manage audit readiness. | |
| 1081 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Knowledge of cybersecurity governance strategy in line with NCA, SAMA, ISO 27001, and organizational objectives. |
| 1082 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Knowledge of data classification protocols, access control implementation, and data leakage prevention monitoring. |
| 1083 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Knowledge of project governance principles, including planning, tracking, resource allocation, and risk-based prioritization. |
| 1084 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Knowledge of incident response governance integration. |
| 1085 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Ability to design cybersecurity awareness and training programs. |
| 1086 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Ability to lead regulatory engagement and ensure timely reporting and compliance with SAMA, NCA, and global cybersecurity standards. |
| 1087 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Governance | Ability to conduct cybersecurity risk assessments and manage audit readiness. |
| 1088 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Knowledge of cybersecurity governance strategy in line with NCA, SAMA, ISO 27001, and organizational objectives. |
| 1089 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Knowledge of data classification protocols, access control implementation, and data leakage prevention monitoring. |
| 1090 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Knowledge of project governance principles, including planning, tracking, resource allocation, and risk-based prioritization. |
| 1091 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Knowledge of incident response governance integration. |
| 1092 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Ability to design cybersecurity awareness and training programs. |
| 1093 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Ability to lead regulatory engagement and ensure timely reporting and compliance with SAMA, NCA, and global cybersecurity standards. |
| 1094 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Compliance | Ability to conduct cybersecurity risk assessments and manage audit readiness. |
| 1095 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Knowledge of cybersecurity governance strategy in line with NCA, SAMA, ISO 27001, and organizational objectives. |
| 1096 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Knowledge of data classification protocols, access control implementation, and data leakage prevention monitoring. |
| 1097 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Knowledge of project governance principles, including planning, tracking, resource allocation, and risk-based prioritization. |
| 1098 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Knowledge of incident response governance integration. |
| 1099 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Ability to design cybersecurity awareness and training programs. |
| 1100 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Ability to lead regulatory engagement and ensure timely reporting and compliance with SAMA, NCA, and global cybersecurity standards. |
| 1101 | Risk Management | Cybersecurity | Cybersecurity GRC | Cybersecurity Risk | Ability to conduct cybersecurity risk assessments and manage audit readiness. |
| 1102 | Risk Management | Cybersecurity | Cybersecurity Architecture | Knowledge of security architecture design principles across infrastructure, applications, and cloud environments. | |
| 1103 | Risk Management | Cybersecurity | Cybersecurity Architecture | Knowledge of cybersecurity frameworks and standards, including NCA ECC, SAMA, ISO 27001, NIST, PCI-DSS, and SWIFT CSCF. | |
| 1104 | Risk Management | Cybersecurity | Cybersecurity Architecture | Knowledge of cloud security architectures and controls within AWS, Azure, and GCP platforms, including Zero Trust security models. | |
| 1105 | Risk Management | Cybersecurity | Cybersecurity Architecture | Ability to apply secure development practices using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools. | |
| 1106 | Risk Management | Cybersecurity | Cybersecurity Architecture | Ability to integrate and configure security technologies such as firewalls, IDS/IPS, SIEM, DLP, CASB, endpoint protection, and encryption solutions. | |
| 1107 | Risk Management | Cybersecurity | Cybersecurity Architecture | Change Advisory and Assessment | Knowledge of security architecture design principles across infrastructure, applications, and cloud environments. |
| 1108 | Risk Management | Cybersecurity | Cybersecurity Architecture | Change Advisory and Assessment | Knowledge of cybersecurity frameworks and standards, including NCA ECC, SAMA, ISO 27001, NIST, PCI-DSS, and SWIFT CSCF. |
| 1109 | Risk Management | Cybersecurity | Cybersecurity Architecture | Change Advisory and Assessment | Knowledge of cloud security architectures and controls within AWS, Azure, and GCP platforms, including Zero Trust security models. |
| 1110 | Risk Management | Cybersecurity | Cybersecurity Architecture | Change Advisory and Assessment | Ability to apply secure development practices using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools. |
| 1111 | Risk Management | Cybersecurity | Cybersecurity Architecture | Change Advisory and Assessment | Ability to integrate and configure security technologies such as firewalls, IDS/IPS, SIEM, DLP, CASB, endpoint protection, and encryption solutions. |
| 1112 | Risk Management | Cybersecurity | Cybersecurity Architecture | Design and Architecture | Knowledge of security architecture design principles across infrastructure, applications, and cloud environments. |
| 1113 | Risk Management | Cybersecurity | Cybersecurity Architecture | Design and Architecture | Knowledge of cybersecurity frameworks and standards, including NCA ECC, SAMA, ISO 27001, NIST, PCI-DSS, and SWIFT CSCF. |
| 1114 | Risk Management | Cybersecurity | Cybersecurity Architecture | Design and Architecture | Knowledge of cloud security architectures and controls within AWS, Azure, and GCP platforms, including Zero Trust security models. |
| 1115 | Risk Management | Cybersecurity | Cybersecurity Architecture | Design and Architecture | Ability to apply secure development practices using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools. |
| 1116 | Risk Management | Cybersecurity | Cybersecurity Architecture | Design and Architecture | Ability to integrate and configure security technologies such as firewalls, IDS/IPS, SIEM, DLP, CASB, endpoint protection, and encryption solutions. |
| 1117 | Risk Management | Cybersecurity | Cybersecurity Architecture | Application Cybersecurity | Knowledge of security architecture design principles across infrastructure, applications, and cloud environments. |
| 1118 | Risk Management | Cybersecurity | Cybersecurity Architecture | Application Cybersecurity | Knowledge of cybersecurity frameworks and standards, including NCA ECC, SAMA, ISO 27001, NIST, PCI-DSS, and SWIFT CSCF. |
| 1119 | Risk Management | Cybersecurity | Cybersecurity Architecture | Application Cybersecurity | Knowledge of cloud security architectures and controls within AWS, Azure, and GCP platforms, including Zero Trust security models. |
| 1120 | Risk Management | Cybersecurity | Cybersecurity Architecture | Application Cybersecurity | Ability to apply secure development practices using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools. |
| 1121 | Risk Management | Cybersecurity | Cybersecurity Architecture | Application Cybersecurity | Ability to integrate and configure security technologies such as firewalls, IDS/IPS, SIEM, DLP, CASB, endpoint protection, and encryption solutions. |
| 1122 | Risk Management | Cybersecurity | Identity and Access Management | Knowledge of Identity and Access Management (IAM) systems. | |
| 1123 | Risk Management | Cybersecurity | Identity and Access Management | Knowledge of regulatory requirements and best practices for IAM compliance and audit readiness. | |
| 1124 | Risk Management | Cybersecurity | Identity and Access Management | Knowledge of authentication and authorization technologies including multi-factor authentication (MFA), single sign-on (SSO), and federated identity management. | |
| 1125 | Risk Management | Cybersecurity | Identity and Access Management | Ability to manage user lifecycle processes such as provisioning, deprovisioning, and periodic access certification. | |
| 1126 | Risk Management | Cybersecurity | Identity and Access Management | Ability to design and manage automated IAM workflows for access requests, approvals, and role assignments. | |
| 1127 | Risk Management | Cybersecurity | Identity and Access Management | Ability to apply IAM frameworks and standards such as least privilege, role-based access control (RBAC), and zero trust models. | |
| 1128 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Knowledge of Identity and Access Management (IAM) systems. |
| 1129 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Knowledge of regulatory requirements and best practices for IAM compliance and audit readiness. |
| 1130 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Knowledge of authentication and authorization technologies including multi-factor authentication (MFA), single sign-on (SSO), and federated identity management. |
| 1131 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Ability to manage user lifecycle processes such as provisioning, deprovisioning, and periodic access certification. |
| 1132 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Ability to design and manage automated IAM workflows for access requests, approvals, and role assignments. |
| 1133 | Risk Management | Cybersecurity | Identity and Access Management | Access Control Operation | Ability to apply IAM frameworks and standards such as least privilege, role-based access control (RBAC), and zero trust models. |
| 1134 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Knowledge of Identity and Access Management (IAM) systems. |
| 1135 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Knowledge of regulatory requirements and best practices for IAM compliance and audit readiness. |
| 1136 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Knowledge of authentication and authorization technologies including multi-factor authentication (MFA), single sign-on (SSO), and federated identity management. |
| 1137 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Ability to manage user lifecycle processes such as provisioning, deprovisioning, and periodic access certification. |
| 1138 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Ability to design and manage automated IAM workflows for access requests, approvals, and role assignments. |
| 1139 | Risk Management | Cybersecurity | Identity and Access Management | Access Review and Audit | Ability to apply IAM frameworks and standards such as least privilege, role-based access control (RBAC), and zero trust models. |
| 1140 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Knowledge of Identity and Access Management (IAM) systems. |
| 1141 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Knowledge of regulatory requirements and best practices for IAM compliance and audit readiness. |
| 1142 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Knowledge of authentication and authorization technologies including multi-factor authentication (MFA), single sign-on (SSO), and federated identity management. |
| 1143 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Ability to manage user lifecycle processes such as provisioning, deprovisioning, and periodic access certification. |
| 1144 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Ability to design and manage automated IAM workflows for access requests, approvals, and role assignments. |
| 1145 | Risk Management | Cybersecurity | Identity and Access Management | Third Party Access Management | Ability to apply IAM frameworks and standards such as least privilege, role-based access control (RBAC), and zero trust models. |
| 1146 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII, Diamond Model, and Cyber Kill Chain. | |
| 1147 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Knowledge of Threat Intelligence Platforms (TIPs) and their application. | |
| 1148 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Knowledge of scripting languages such as Python to automate threat data enrichment. | |
| 1149 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Knowledge of open-source intelligence (OSINT) tools. | |
| 1150 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Ability to assess advanced persistent threat (APT) behaviors and global cybersecurity trends. | |
| 1151 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Ability to develop and deliver executive-level threat briefings, tactical reports, and strategic threat assessments. | |
| 1152 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Ability to integrate threat intelligence feeds and indicators of compromise (IOCs) into SIEM and SOC workflows. | |
| 1153 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII, Diamond Model, and Cyber Kill Chain. |
| 1154 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Knowledge of Threat Intelligence Platforms (TIPs) and their application. |
| 1155 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Knowledge of scripting languages such as Python to automate threat data enrichment. |
| 1156 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Knowledge of open-source intelligence (OSINT) tools. |
| 1157 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Ability to assess advanced persistent threat (APT) behaviors and global cybersecurity trends. |
| 1158 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Ability to develop and deliver executive-level threat briefings, tactical reports, and strategic threat assessments. |
| 1159 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Operation Center | Ability to integrate threat intelligence feeds and indicators of compromise (IOCs) into SIEM and SOC workflows. |
| 1160 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII, Diamond Model, and Cyber Kill Chain. |
| 1161 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Knowledge of Threat Intelligence Platforms (TIPs) and their application. |
| 1162 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Knowledge of scripting languages such as Python to automate threat data enrichment. |
| 1163 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Knowledge of open-source intelligence (OSINT) tools. |
| 1164 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Ability to assess advanced persistent threat (APT) behaviors and global cybersecurity trends. |
| 1165 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Ability to develop and deliver executive-level threat briefings, tactical reports, and strategic threat assessments. |
| 1166 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Threat Intelligence | Ability to integrate threat intelligence feeds and indicators of compromise (IOCs) into SIEM and SOC workflows. |
| 1167 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII, Diamond Model, and Cyber Kill Chain. |
| 1168 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Knowledge of Threat Intelligence Platforms (TIPs) and their application. |
| 1169 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Knowledge of scripting languages such as Python to automate threat data enrichment. |
| 1170 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Knowledge of open-source intelligence (OSINT) tools. |
| 1171 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Ability to assess advanced persistent threat (APT) behaviors and global cybersecurity trends. |
| 1172 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Ability to develop and deliver executive-level threat briefings, tactical reports, and strategic threat assessments. |
| 1173 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Cyber Fraud | Ability to integrate threat intelligence feeds and indicators of compromise (IOCs) into SIEM and SOC workflows. |
| 1174 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII, Diamond Model, and Cyber Kill Chain. |
| 1175 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Knowledge of Threat Intelligence Platforms (TIPs) and their application. |
| 1176 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Knowledge of scripting languages such as Python to automate threat data enrichment. |
| 1177 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Knowledge of open-source intelligence (OSINT) tools. |
| 1178 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Ability to assess advanced persistent threat (APT) behaviors and global cybersecurity trends. |
| 1179 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Ability to develop and deliver executive-level threat briefings, tactical reports, and strategic threat assessments. |
| 1180 | Risk Management | Cybersecurity | Cybersecurity Intelligence Center | Security Control Management | Ability to integrate threat intelligence feeds and indicators of compromise (IOCs) into SIEM and SOC workflows. |
| 1181 | Risk Management | Data Management Office | Knowledge of NDMO data governance and privacy regulations and their implementation within financial institutions. | ||
| 1182 | Risk Management | Data Management Office | Knowledge of data-sharing agreements and MoUs with internal departments and external entities. | ||
| 1183 | Risk Management | Data Management Office | Knowledge of data protection technologies, including encryption, tokenization, and anonymization to safeguard sensitive information. | ||
| 1184 | Risk Management | Data Management Office | Knowledge of data integration and sharing platforms such as APIs, secure file transfer protocols (SFTP), and enterprise data lakes. | ||
| 1185 | Risk Management | Data Management Office | Knowledge of privacy-preserving data sharing techniques, including differential privacy models and data masking frameworks. | ||
| 1186 | Risk Management | Data Management Office | Ability to monitor compliance through structured audits and generate regulatory reports for NDMO, internal stakeholders, and audit committees. | ||
| 1187 | Risk Management | Data Management Office | Data Sharing | Knowledge of NDMO data governance and privacy regulations governing secure data-sharing across financial institutions. | |
| 1188 | Risk Management | Data Management Office | Data Sharing | Knowledge of secure data-sharing platforms, including the use of APIs, encryption protocols, anonymization, and tokenization techniques. | |
| 1189 | Risk Management | Data Management Office | Data Sharing | Knowledge of data privacy risks and mitigation strategies, including cybersecurity controls and compliance with data protection laws. | |
| 1190 | Risk Management | Data Management Office | Data Sharing | Ability to draft, negotiate, and manage data-sharing agreements. | |
| 1191 | Risk Management | Data Management Office | Data Sharing | Ability to design and implement standardized national data-sharing protocols. | |
| 1192 | Risk Management | Data Management Office | Data Governance Office | Knowledge of enterprise data governance frameworks such as DAMA and EDM Council DCAM, including implementation of data stewardship roles, policies, and controls. | |
| 1193 | Risk Management | Data Management Office | Data Governance Office | Knowledge of data validation, standardization, and enrichment routines. | |
| 1194 | Risk Management | Data Management Office | Data Governance Office | Knowledge of data lineage, classification, traceability, and documentation. | |
| 1195 | Risk Management | Data Management Office | Data Governance Office | Ability to define and enforce data access policies using role-based models and ensure integration with Identity and Access Management (IAM) systems. | |
| 1196 | Risk Management | Data Management Office | Data Governance Office | Ability to implement governance practices in compliance with NDMO, SAMA, ISO 27001, GDPR, and other relevant data privacy and regulatory standards. | |
| 1197 | Risk Management | Data Management Office | Data Governance Office | Ability to manage tools for data lineage, classification, traceability, and enterprise-wide documentation of metadata. | |
| 1198 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Knowledge of enterprise data governance frameworks such as DAMA and EDM Council DCAM, including implementation of data stewardship roles, policies, and controls. |
| 1199 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Knowledge of data validation, standardization, and enrichment routines. |
| 1200 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Knowledge of data lineage, classification, traceability, and documentation. |
| 1201 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Ability to define and enforce data access policies using role-based models and ensure integration with Identity and Access Management (IAM) systems. |
| 1202 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Ability to implement governance practices in compliance with NDMO, SAMA, ISO 27001, GDPR, and other relevant data privacy and regulatory standards. |
| 1203 | Risk Management | Data Management Office | Data Governance Office | Meta Data Management | Ability to manage tools for data lineage, classification, traceability, and enterprise-wide documentation of metadata. |
| 1204 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Knowledge of enterprise data governance frameworks such as DAMA and EDM Council DCAM, including implementation of data stewardship roles, policies, and controls. |
| 1205 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Knowledge of data validation, standardization, and enrichment routines. |
| 1206 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Knowledge of data lineage, classification, traceability, and documentation. |
| 1207 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Ability to define and enforce data access policies using role-based models and ensure integration with Identity and Access Management (IAM) systems. |
| 1208 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Ability to implement governance practices in compliance with NDMO, SAMA, ISO 27001, GDPR, and other relevant data privacy and regulatory standards. |
| 1209 | Risk Management | Data Management Office | Data Governance Office | Reference Master Data Management | Ability to manage tools for data lineage, classification, traceability, and enterprise-wide documentation of metadata. |
| 1210 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Knowledge of enterprise data governance frameworks such as DAMA and EDM Council DCAM, including implementation of data stewardship roles, policies, and controls. |
| 1211 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Knowledge of data validation, standardization, and enrichment routines. |
| 1212 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Knowledge of data lineage, classification, traceability, and documentation. |
| 1213 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Ability to define and enforce data access policies using role-based models and ensure integration with Identity and Access Management (IAM) systems. |
| 1214 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Ability to implement governance practices in compliance with NDMO, SAMA, ISO 27001, GDPR, and other relevant data privacy and regulatory standards. |
| 1215 | Risk Management | Data Management Office | Data Governance Office | Data Governance Compliance | Ability to manage tools for data lineage, classification, traceability, and enterprise-wide documentation of metadata. |
| 1216 | Risk Management | Data Management Office | Personal Data Protection Office | Knowledge of Data Privacy & Protection Regulations (Personal Data Protection, SAMA, GDPR, DAMA and NDMO frameworks) | |
| 1217 | Risk Management | Data Management Office | Personal Data Protection Office | Knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) systems to enforce role-based access controls and secure data environments. | |
| 1218 | Risk Management | Data Management Office | Personal Data Protection Office | Knowledge of enterprise-wide data governance and privacy frameworks. | |
| 1219 | Risk Management | Data Management Office | Personal Data Protection Office | Ability to implement and manage Data Loss Prevention (DLP) solutions and encryption technologies to safeguard sensitive and personal data. | |
| 1220 | Risk Management | Data Management Office | Personal Data Protection Office | Ability to conduct Data Protection Impact Assessments (DPIAs) | |
| 1221 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Compliance | Knowledge of Data Privacy & Protection Regulations (Personal Data Protection, SAMA, GDPR, DAMA and NDMO frameworks) |
| 1222 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Compliance | Knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) systems to enforce role-based access controls and secure data environments. |
| 1223 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Compliance | Knowledge of enterprise-wide data governance and privacy frameworks. |
| 1224 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Compliance | Ability to implement and manage Data Loss Prevention (DLP) solutions and encryption technologies to safeguard sensitive and personal data. |
| 1225 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Compliance | Ability to conduct Data Protection Impact Assessments (DPIAs) |
| 1226 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Operations | Knowledge of Data Privacy & Protection Regulations (Personal Data Protection, SAMA, GDPR, DAMA and NDMO frameworks) |
| 1227 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Operations | Knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) systems to enforce role-based access controls and secure data environments. |
| 1228 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Operations | Knowledge of enterprise-wide data governance and privacy frameworks. |
| 1229 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Operations | Ability to implement and manage Data Loss Prevention (DLP) solutions and encryption technologies to safeguard sensitive and personal data. |
| 1230 | Risk Management | Data Management Office | Personal Data Protection Office | Data Protection Operations | Ability to conduct Data Protection Impact Assessments (DPIAs) |
| 1231 | Risk Management | Data Management Office | Data Quality | Knowledge of data quality frameworks and standards for defining, measuring, and improving data accuracy, completeness, consistency, and timeliness. | |
| 1232 | Risk Management | Data Management Office | Data Quality | Knowledge of dataset profiling techniques, quality rule application, and root cause analysis. | |
| 1233 | Risk Management | Data Management Office | Data Quality | Knowledge of the data lifecycle and its implications for maintaining data quality across creation, usage, transformation, archival, and disposal stages. | |
| 1234 | Risk Management | Data Management Office | Data Quality | Ability to investigate, triage, and resolve data quality anomalies, inconsistencies, and conflicts in coordination with business and IT stakeholders. | |
| 1235 | Risk Management | Data Management Office | Data Quality | Ability to utilize data quality tools, or custom-built platforms for monitoring and certifying data health. |
Tree view of Risk Management
- Risk Management