CIMB Bank
Responsibilities:
Provide guidance to IT staff on regulatory requirements, technology compliance as well as IT outsourcing.
Enable operational efficiency of technology controls through oversight and alignment of standard operating procedures (SOP) according to established framework and standards.
Work with IT teams to ensure policies, procedures and control failings/weaknesses are being actively managed to a satisfactory level.
Maintain registers on IT SOPs, deviations, audit findings, non-compliance and formulate IT Risk reports with updates to the management on monthly basis.
Manage technology aspects of both internal/external audits; liaison with regulators on technology compliance matters.
To follow up on audit issues for proper implementation, at the same time develop a mechanism to ensure the issue is also adequately addressed across function and locations.
To assist business units on technology related outsourcing arrangements.
Training & Coaching IT Staff along Risk Identification, Assessment, Treatment & Monitoring and Reporting
Assist Head IT Governance in all ITD Management Governance Meetings like Weekly Team Lead Meeting, GT Monthly meeting, CAB Process, Critical/ Major Incidents to contribute effectively as an SME to help the team in identifying risks, treating the risk, tracking and reporting.
Deputise for Head IT Governance as ITD POC for all Risk Management Governance structure forums like Branch Outsourcing Risk Committee (BOC), Operation Risk Committee (ORC), Singapore Risk Committee (SRC), Crisis Management Committee (CRC) & Branch Management Committee (BMC) on all IT Risk related topics.
As POC for all 1st line of defense like IT Assurance & Internal Audit and any external audit like PWC, including regulatory audit like MAS
Tracking of risk-related issues and gaps through the bank’s Self-Assessment Risk Review system
Tracking of SOPs for yearly updates.
Requirements:
Bachelor degree in Information Systems or its equivalent
At least 5-8 years’ experience in infrastructure and technology risk management (with preferably 2 years in a leading role)
Strong track record in technology risk management, preferably in a banking environment.
Good leadership qualities.
Able to engage stakeholders and develop options for them.
Highly result oriented and can work independently.
Ability to build relationship and interact effectively with internal and external parties.
Good analytical, technical, written and verbal communication skills.
Technology and operational risk management leadership.
Risk management policy development.
Technology outsourcing & risk gap assessments.
MAS Technology Risk Management expertise.