Third-Party Technology and AI Risk Specialist

Job Snapshot:
Role:
Third-Party Technology and AI Risk Specialist

- Location:

Abu Dhabi, United Arab Emirates
- Industry: Banking
- Function:
Risk Management-Compliance

- Experience:

Minimum 7 years
- Job Type: Full Time
- Work Arrangement:
On-site

Dicetek LLC is seeking an experienced Third-Party Technology and AI Risk Specialist to assess and monitor risks associated with technology vendors, cloud services, outsourced technology arrangements and AI-enabled services in Abu Dhabi, United Arab Emirates. The role focuses on third-party risk management, cybersecurity due diligence, operational resilience, data privacy and AI governance. The successful candidate will conduct inherent-risk screening, perform detailed vendor assessments and evaluate the effectiveness of security, privacy, resilience and AI-related controls.

• Perform inherent-risk screening for technology vendors and AI-enabled service providers.
• Conduct detailed third-party risk assessments based on the nature of the services provided.
• Evaluate vendor technology, cybersecurity and operational risk exposures.
• Review available vendor evidence to assess the effectiveness of relevant controls.
• Identify potential risks associated with outsourced technology services.
• Document assessment findings and assign evidence-based risk ratings.
• Prepare assessment results for relevant risk and governance stakeholders.

• Assess vendor cybersecurity controls and associated technology risks.
• Review security arrangements supporting cloud-based and outsourced services.
• Evaluate relevant security documentation and control evidence.
• Identify control gaps requiring further clarification or remediation.
• Consider cybersecurity risks arising from vendor dependencies and subcontracting arrangements.
• Document security-related findings and residual risk considerations.

• Assess risks introduced by third-party AI-enabled services.
• Review relevant AI governance controls implemented by technology vendors.
• Evaluate available evidence relating to AI-related risk management practices.
• Identify potential risks associated with third-party AI models and services.
• Document AI governance gaps and associated remediation requirements.
• Support risk decisions involving AI-enabled vendor capabilities.
• Apply appropriate governance considerations when assessing AI-related services.

• Assess vendor data privacy controls and associated information risks.
• Review operational resilience arrangements relevant to outsourced services.
• Evaluate third-party dependencies that may affect service continuity.
• Consider subcontractor risks within relevant vendor arrangements.
• Identify weaknesses affecting the security, privacy or resilience of third-party services.
• Document control deficiencies and associated risk implications.

• Review contractual control requirements associated with technology and AI vendors.
• Identify security, privacy, resilience and governance controls requiring contractual consideration.
• Document residual risks following vendor assessments.
• Define and track remediation actions for identified control gaps.
• Maintain records of outstanding vendor risks and agreed corrective actions.
• Support risk acceptance and governance decisions through clear assessment documentation.

• Monitor third-party technology and AI risks throughout the vendor lifecycle.
• Review risk implications associated with contract renewals.
• Assess material changes affecting vendor services or risk exposure.
• Maintain visibility of outstanding control deficiencies and remediation activities.
• Update vendor risk records when relevant circumstances change.
• Support continued assessment of vendor security, privacy, resilience and AI governance controls.
• Maintain appropriate monitoring plans for relevant third-party arrangements.

• Prepare vendor risk assessments for governance review.
• Document risk decisions and supporting evidence.
• Present relevant findings to technology, risk and business stakeholders.
• Maintain evidence supporting third-party risk management activities.
• Prepare reports covering vendor risk ratings, residual risks and remediation progress.
• Support governance forums with accurate and traceable risk documentation.
• Coordinate with relevant stakeholders to address assessment findings and outstanding actions.

• Minimum 7 years of relevant…