Executive, IT Governance - Rewarding Work

Responsibilities
 

• Update Departmental Risk Indicators and follow up with respective risk owners for supporting documents submission.
• Assist in conducting internal risk assessment and compliance gap analysis in IT Department.
• Review and revise policy, framework and SOPs owned by IT Governance to ensure relevancy of its content.
• Draft processes to evaluate effectiveness of internal SOPs/standards and identify gaps on current SOPs/standards.
• Support in gathering, compiling the supporting documents requested by ERM, TMA-IT, Auditor and Regulatory.
• Follow up with issue owner on action and remediation plans for audit, gap analysis, risk assessment CSA open issues.
• Assist in preparing Discovery Workshop presentation material.
• Perform process enhancement by introducing new checklist / form / SOP (if necessary)
• Perform security check on new server - 1)Ensure server operating system/databases are hardened based on hardening checklist and remind system admin raise IT exemption for non-compliance area; 2) IDs with administrator privileges are lodged into CyberArk (password management system).
• Coordinate security awareness talk, prepare security awareness emails and quiz questions and compile quiz results.
• Prepare annual IT satisfaction questionnaires.

Requirements
 

• Bachelor’s Degree or equivalent in Information Technology or related field.
• Fresh graduates or 1 year auditing experience as an IT Risk & Compliance specialist, or IT auditor experience in the financial/insurance industry is preferred.
• Knowledge in IT Security and IT Governance, Risk and Compliance would be an added advantage.
• Ability to collaborate, working closely with both functional and technical team.
• Good communication skills (written & verbal).
• Good planning, organising, problem solving and analytical skills.