Business Function
Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
Technology is key to enabling the DBS vision of being the leading bank in Asia. We are constantly challenged by ever changing technology landscape, increasing customer sophistication / demands and introduction of new / updated regulatory requirements. We need passionate Governance & Control Managers who play a high impact role as a key line of defence function in enhancing the bank’s technology risk and control posture. This includes identifying potential technology risks associated with existing, evolving and new technology systems and business processes, assessing potential impacts and engaging with other technology leaders on the risk treatment options based on enterprise risk appetite. Risks and mitigation plans are reported to senior leadership for review and attention. The incumbent is a driven, self-starter, who plays an active role working in a dynamic environment with the Technology risk teams and is expected to have analytical skills to assess information and identify potential risks, be inquisitive on risks and controls issues.
The incumbent is responsible for delivering effective governance forums on technology risks including tracking and reporting.
Responsibilities
- Governance and ControlAnalyse and identify emerging trends, hotspots, systemic issues and potential technology risks, including tracking and management reporting.
Analyse trends, anomalies and behaviours and work with technology stakeholders to design and implement technical IT risk measure that are relevant to the Lines of Business.
Formulate and maintain information and technology risk policies, standards and guidelines for the organisation, and work closely with the Technology stakeholders to enforce technology risk management policies and standards.
Review adequacy of technology standards and guidelines in alignment with the associated technology risks.
Use data driven approach to challenge both historical and proposed practices.
Responsible for supporting and delivering effective risk governance committees on technology risks including tracking and reporting.
Enhance the business’ understanding of regulatory/compliance risk requirements and the implications to the organization.
- Project ManagementPlan, execute, and finalize projects according to strict deadlines and within scope/budget.
Develop full-scale project plans and associated communications plans.
Coordinate the efforts of team members.
- Product OwnerAnalyse data, evaluate risk and define required governance and control measures for the governance and control platforms
Define and Optimise process to ensure data integration across different systems
Manage the upstream and downstream governance and control platform dependencies
Own, define, deliver, test and operationalise the end-to-end governance and control platform in collaboration with the relevant team
Move from a federated to an integrated governance and control platform
- Quality AssurancePlan and conduct detailed testing to ensure quality of delivery
- Process ImprovementIdentify areas for improvement and implement necessary changes to processes.
Develop and implement best practices and required platform for project execution and management.
Conduct project post-mortems and create recommendations reports.
- ReportingAbility to work independently, prepare and write comprehensive reports for senior management on technology risk management activities and risk events for presentation to risk committees.
Ability to communicate complex technology risk concepts in a clear and concise manner.
Track Enterprise governance/control risks, milestones and deliverables.
Develop and deliver progress reports, proposals, and presentations.
Ensure all documentation is complete and accurate.
Partner with first line peers to succinctly frame and report on EOS , Non-Security Patch, FOSS risks relative to risk appetite.
- Stakeholder ManagementProactive in forging effective engagement with key stakeholders (eg. Line of Business and Subject matter expert) on governance and control to ensure clear and consistent communication.
Manage governance/control scope and alignment with Engineering delivery capabilities
Conduct regular status meetings with stakeholders.
Requirements
- Diploma or Degree holder.
- Minimum 5-10 years of working experience in relevant field. The role requires the individual to have more than 3 years of Line of Defence 1.0/1.5 or as a Product Owner in a Financial institution.
- Proficient and forward looking in identifying issues and risks and designing key controls and risk indicators.
- Ability to lead discussions with Line1.0 on reporting requirements and problem solve as required.
- Strong proficiency in technical/product expertise and knowledge in relevant fields.
- Technical ExperienceIT professional with good knowledge of technology platforms and systems in banks.
Experienced IS or risk professional with experience and exposure to Agile, DevOps, SRE and security.
Proficiency in risk assessment tools, data analysis, and reporting software.
Sound knowledge in regulatory requirements (e.g. MAS Notice 644, 655, and TRM guidelines) and industry standards/ frameworks such as ITIL, COBIT, NIST, ISO 27001/2,CRISC.
Banking Act, Personal Data Protection Act.
Strong proficiency in Excel Power Query or Python
Experienced in End of Support and FOSS Governance
- Non-Technical ExperienceProven critical analytical, including and the ability to express a point of view supported by data (with both technical and non-technical audiences).
Adept at challenging and at the same time influencing Line 1 to make corrective actions.
Good planning and other project management skills, including strong organisation skills.
Must be solutions oriented; ability to work with all levels of management and staff.
Self-driven, passionate about hands-on learning on emerging technologies and its risks.
Self-starter, performance-oriented individuals.
- Work RelationshipSupport in discharging the responsibilities of the team.
Strong ability in knowledge sharing with peers.
Contribute as a member of Team and collaborate with fellow team members and technology managers including Line1.0.
Develop relationships with peer in the technology organisation.
Apply now
We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.
