Executive Officer, GT-Governance & Portfolio Management (Governance Support)

Job Purpose *

•    To provide comprehensive operational governance, risk management, audit tracking, business continuity coordination and management reporting support across Group Technology (GT). 

•    The role ensures timely compilation, monitoring and reporting of audit findings, Control Issue Management (CIM), Control Environment Testing (CET), Key Risk Indicators (KRI), Third-Party Risk Management (TPRM), Vulnerability Assessment and Penetration Testing (VAPT), and Business Continuity Management (BCM) matters to support operational efficiency and regulatory compliance across GT units.

Job Description *

A. Governance & Management Reporting

•    Consolidate and finalise monthly governance decks for management reporting i.e. MYMC, GTMC and TORCh.

•    Maintain Operational Risk Management (ORM) and audit reporting on open control issues, findings, owners, remediation status and due dates.

•    Compile patching, hardening, cyber assessment, TRAS and KRI updates for management forums.

B. Risk & Audit Issue Monitoring

•    Perform fortnightly reviews of the CIM tracker and maintain due/near-due follow-up reports.

•    Conduct periodic GRC data pulls for CET attestations and KRI monitoring, and issue follow-up status reports.

•    Consolidate VAPT findings and remediation updates, and support monthly VAPT reporting provided by GT IT Security team.

•    Track project advisory and non-advisory audit progress, advisory memo issuance and project completion.

•    Monitor GCAD planner and Audit Dashboard status and prepare relevant management reporting.

C. Business Continuity Management & DCC Responsibilities

•    Coordinate annual BIA and BCP submissions, DCC briefings, HOD sign-offs and submission to Group BCM.

•    Compile quarterly BCP, TPRM/outsourcing and major incident inputs for the Group BCM/BCMSC scorecard.

•    Maintain call-tree contacts, coordinate exercises and document observations and corrective actions.

•    Coordinate OSH incident reporting.

Job Specification *

Qualifications 

(Basic Degree/Diploma etc)    Bachelor’s Degree in Computer Science / Information Technology or equivalent.

Professional Qualification and/or Regulatory, Licensing requirements      -

Relevant Work Experience     -

Key Dimension of Impact *

Non-financial

•    Coverage across Group Technology divisions and business units.

•    Monitoring of CIMs, CET attestations, KRI metrics and audit findings.

•    Monthly and quarterly reporting for management reporting i.e. MYMC, GTMC and TORCh.

•    End-to-end BCM coordination with GT units and Department Continuity Coordinators.

Financial

Indirect risk mitigation through timely remediation, regulatory compliance and business continuity planning, reducing exposure to penalties, audit non-compliance and operational disruption.

Required Competencies and Skills *

Competencies/Skills 

(Essential to succeed in this job)

    •    Strong Microsoft Excel skills for consolidation, tracking and analysis, and PowerPoint skills for executive reporting.

•    Excellent communication skills in English both verbal and written 

•    Able to adapt well to changing demands, multi-task effectively and work autonomously with a problem-solving and ownership of issues mindset 

•    Proven record of good teamwork and collaboration 

Travel Requirements (if any)  

Frequency

(Incl typical Destinations and Duration)    Minimal to none; role is primarily office-based and supports internal operations.