•Be aware of incidents and their short-term remediation. Responsible to address recurring incidents by working with relevant teams to recommend permanent solutions. Ensures long-term remediation for incidents and problems is integrated into the Application roadmap and implemented.
•Ensures the ASC document (which is used to determine an application’s Application sensitivity and IT continuity level and to identify the application’s key IT risk & cyber requirements and their implementation status) is properly and promptly completed. Ensures the ASC document is timely renewed as stipulated by Group requirement. Ensures non-compliances to IT risk & cyber requirements are addressed or remediated, and the associated risks are identified and covered by risk card if necessary.
•Ensures application and security vulnerabilities and non-compliances to engineering and architecture rules are addressed or remediated, and the associated risks are identified and covered by risk card if necessary.
•Ensures the applications within his/her scope are properly secured.
•Complies with and ensures the application of best practices regarding engineering rules, CI/CD, architecture rules, safety standards.
•Applies the guidelines of the obsolescence management plan to manage the lifecycle of application and its components and guarantees that all components are supported by suppliers.
•Manages new versions within his/her scope of applications, ensuring new releases are duly created and updated in Relman(release manager tool).
•Guarantees the consistency of the released version: updated documentation such as architecture diagram, technical data dictionary; management of the configuration to ensure data consistency in all referential apps (e.g., Refapp, MAP, CMDB, BAM+, cloud register) and accuracy in the application parent/instance links between referential apps.
Manages relationships with the suppliers within his/her scope:
oReceives new versions and releases and making sure up-to-date product documentation and troubleshooting guides are provided.
oMeets regularly with suppliers to ensure their compliance to contractual obligations.
oPerforms yearly TPTRM (Third Party Risk Management) assessment with the suppliers.
oVerifies with suppliers regarding exposure to certain critical security vulnerabilities whenever these needs arise, and to request remediation plan if necessary.
Reports and alerts management for his/her scope of applications
Proposes methods to increase optimization and efficiency
Deploys the continuity of service action plan
Develops relationship networks with internal and external stakeholders
o
