Business Function
Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
The Senior Technology Risk Manager ensures that the bank’s public and private cloud technologies and services are compliant, secure, resilient, and robust.The successful candidate will be able to drive technology risk management at a strategic level in partnership with management and both internal and external stakeholders, as well as lead the operational and day-to-day technology risk management activities.
Responsibilities
- Partner with stakeholders within Group Infrastructure and Cloud to assess and manage Technology Risks
- Use data and visualization to drive and demonstrate security and compliance of Group Technology infrastructure and cloud posture.
- Engage with technology stakeholders to proactively identify risks at a detailed and technical level and ensure that IT is effectively driving remediation activities and to continuously improve IT risk posture.
- Work with technology stakeholders to design and implement technical risk mitigating measures.
- Drive burndown and reporting of Technology debts in technology risk forums.
- Responsible for governing change process within Group Infrastructure & Cloud
- Perform thematic analysis and reviews on issues and risks.
- Assess regulatory (e.g., MAS, HKMA, CBRC, OJK, RBI, etc) changes impacting technology infrastructure and drive related risk mitigation program with technology stakeholders.
- Proactive in forging effective engagement with key stakeholders on risk management, control, and governance matters
- Responsible for tracking and assessing regulatory requirements (guidelines, advisories, notices, circulars etc), technology questionnaire (TQ) and request for info (RFI), inspection and mandatory reporting.
- Engage and work with technology stakeholders to fulfil regulator’s TQ, RFI, inspection, and mandatory reporting.
- Perform due diligence and ongoing monitoring of third-party vendors and services.
- Communicate and provide guidance of new policies and standards to relevant infrastructure and cloud teams.
- Conduct Tech risk awareness training within Group Infrastructure & Cloud
Requirements
- Possess a degree, preferably in Computer Science, Engineering, Information Technology, or related discipline from a recognized University.
- Professional Certification preferred – CISA/CISM/CISSP/CRISC/CBCP
- Minimum of 12 years of experience in technology
- Demonstrated experience in Identifying, assessing, and advising on technology risks in a regulated industry.
- Knowledge of the Banking Act – Banking Secrecy, Bank's policy and guidelines, Information Security Policy, Anti-Money Laundering, Cyber Security Act, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines etc.
- Excellent organizational, problem solving, interpersonal and operating skills to effectively drive the IT Risk agenda with IT functions.
- Strong communication skills at all levels -- able to effectively communicate with IT management and as well line staff to drive IT risk mitigation initiatives and other IT risk management services.
- Experience to driving IT risk management in digital age a plus.
- Knowledge of Information Security, System Resiliency & Availability & Software development practices and frameworks preferred.
- Good technical competencies and exposure to infrastructure development, support, and management
- Demonstrated experience of leveraging data and analytics to get stakeholder buy-in is a plus.
Apply now
We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.
