Technology Risk, AVP - Excellent Benefits Package

Job Function:

• To assist the Head of Risk in the Technology Risk Management function. The role will be independent from day-to-day technology operations of the first line and be well apprised of current and emerging technology risks which could potentially affect the Company’s risk profile.

Key Responsibilities:

• Formulating, facilitating, implementing and maintaining effective implementation of Technology Risk Management Framework (TRMF) and Cyber Resilience Framework (CRF).
• Enforcing compliance with these frameworks and other technology related regulatory requirements.
• Providing an independent risk oversight for overall technology risk management of the Company. Reviewing of technology risk strategy, plans and resources. Implication of changes in technology risk on personal data and regulatory compliance.
• Advising on critical technology projects and ensuring critical issues that may have an impact on the Company’s risk tolerance are adequately deliberated or escalated in a timely manner.
• Advising senior management on technology risk and security matters, including developments in the Company’s technology security risk profile in relation to its business and operations.
• Assessing and ensuring suitability of technology risk taxonomy and the approaches and methodologies used for technology risk assessment.
• Participating and giving input on technology risk related matters in ITSC, PSC and any other committee/working group meetings, as required.
• Providing oversights and challenges to the first line on the readiness on introduction of new or enhancements to existing technology applications to ensure they are meeting regulatory guidelines and internal policies.
• Providing independent views on third party assessment, where necessary. Third party assessments may include Data Center Risk Assessment (DCRA), Network Resilience and Risk Assessment (NRA) and independent assurance for introduction of new or enhanced digital services.
• Responsible for on-going departmental, IT Risk Assessment, and technology risk of products.
• Responsible for reviewing Technology related KRIs, tolerance limits and loss events reporting. Ensuring risk measurements are appropriate. Spotting for emerging trends or incidents, if any, and engaging technology risk owners for rectification and improvement.
• Organise and coordinate scenario analysis for technology related topics.
• Responsible for coordinating the yearly CSA (Control Self-Assessment) exercise and quarterly follow up reporting for technology related functions.
• Provide oversight for back-up, IT disaster recovery process and testing.

Requirements

• Candidate must possess at least a Bachelor's Degree, Post Graduate Diploma, Professional Degree, in Computer Science
• At least 10 year(s) of working experience in the related field is required for this position.
• Preferably Senior Manager with experience in or Technology Risk / IT Audit from Banking or Insurance
• Full-Time position(s) available.