Risk Specialist, Cyber Risk Specialist Unit , Technology & Cyber Supervision

Provide thought leadership and technical expertise in promoting development of sound risk measurement and mitigation infrastructure. Catalyze advancements in risk infrastructure as a key enabler for managing cyber security risk for financial stability by providing technical expertise rather than operational support. Solutions should challenge conventional thinking and push the boundaries of what is normally possible.

Key responsibilities include overseeing and spearheading of the following:

• Cyber Security Risk Surveillance: Strategic monitoring of emerging cyber security risks and lead thematic reviews or deep-dive assessments to identify sector-wide vulnerabilities.


• Policy and Guidance Development: Formulation and continual enhancement of cyber security risk management policies, frameworks, and technical advisories. Alignment with global standards and regulatory expectations to guide financial institutions in adopting secure, resilient, and sustainable technologies.


• Stakeholder Engagement and Industry Collaboration: Continuous engagement with internal stakeholders, financial institutions, industry bodies, and international regulators. Collaborative initiatives to promote best practices, co-develop training and awareness programs, and influence the evolution of cyber security risk governance across the sector.
  
   

• Lead the development and review cybersecurity requirements, protection strategies, architecture model, governance and risk mitigating measures for the financial sector based on changes identified in the threat landscape.
• Lead and conduct horizontal assessment of risk management methodologies or practices to identify cybersecurity issues · Drive industry-wide risk infrastructure improvement initiatives on cyber security to ensure robust and continuously improving risk measurement and mitigation infrastructure in financial institutions (FIs)
• Lead the development of cybersecurity strategies and framework for the financial sector.
• Drive development of effective surveillance infrastructure and tools for early detection of emerging risks to aid macro and micro institution level monitoring.
• Lead in formulation of course content, conduct training and providing advisory services to strengthen capacity of supervisors in cybersecurity management including managing expectation of stakeholders on cyber threats, vulnerabilities and risks.
• Maintain strong collaboration with relevant stakeholders to influence and enhance on cybersecurity management and IT risk infrastructure developments and best practices.
• Provide technical expertise and advisory in the efficient and effective management of the Bank on cybersecurity matters including research and environmental scanning of emerging internal and external threats, technology trends and directions in mitigating technology risks.
   

Academic Qualifications

• Undergraduate/postgraduate degree in information technology related disciplines (e.g. computer science), with primary focus on network security, IT security and/or cyber security. 
• Professional certifications related to information systems security, auditing, control, assurance and risk management such as Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), ISO27001 lead auditor, Certified Information System Auditor (CISA) is an added advantage

Experience

•  At least 10 years of experience in cyber security risk management and/or IT security / auditing, preferably within the financial industry.
• Has working IT technical knowledge and strong understanding of regulatory requirements and compliance within the financial sector, with a mix of 1LOD and 2LOD experience being preferred
• Experience in developing frameworks, policies or procedural documentation for the cyber security environment is preferred.