Business Function:
Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
Job Responsibilities:
- Collaborate with various T&O technology teams in the maintenance of effective internal tech risk controls;
- Liaise with the Group Audit, Group Legal and Compliance and T&O ORM teams on a regular basis;
- Support both Group and Team Heads to manage internal/external audit engagements;
- Raise issues/concerns, and provide constructive advice to the management so that significant IT risk and control issues are escalated and resolved properly;
- Execute risk assessments and perform controls testing to ensure their effectiveness;
- Track process improvements and issues corrective actions to ensure timely closure;
- Work closely with stakeholders and security teams to mitigate/resolve reported security vulnerabilities
- Perform data analysis or procedure reviews to ensure compliance to the bank security standards;
- Work with internal stakeholders and vendor to review and streamline the work processes of the bank and vendors
- Governance and control of DATA-related Change Requests. This includes representing DATA to various Enterprise Change and Tech Risk-related forums (eg. Weekly Regional Change Control Board Meeting, Tech Risk Forum, etc.).
- Daily review, assessment with either rejection or approval of all DATA-related change requests.
- Education. Act as the Risk and Control evangelist to educate all DATA platform engineers to cultivate a tech risk and change control culture.
Job Requirements
- Bachelor's degree with at least 10 years of experience in technology risk management.
- Good understanding of understanding of technology infrastructure, applications, cybersecurity principles and risk management methodologies. Having knowledge of software development life cycle and associated technology risks and controls will be advantageous.
- Strong project management expertise, including planning, execution, and monitoring of initiatives.
- Strong organizational skills and problem-solving skills, able to deal with complexity and ambiguity.
- Proven competency in organizational agility and cross-team collaboration.
- Good analytical and quantitative skills to use data and metrics to back up assumptions, evaluate outcomes and provide effective challenge.
- Excellent written and verbal communications with the ability to influence decision-making through clear storytelling; simplify complex concepts and deliver the ideas in a clear and concise manner.
- IT savvy, proficiency in PowerPoint, Excel, SharePoint, JIRA and Confluence.
- Professional Certification preferred CISA/CISM/CISSP/CRISC/CBCP.
