Responsibilities & Requirements :
- Support Infrastructure Risk and Control function for Information and Technology Cyber Risk Management operations.
- Drive compliance with operational risk processes and manage technology, information, and cybersecurity risks within various business areas, in line with the firm's risk appetite and regulatory requirements.
- Plan and conduct technology, information, and cybersecurity gap assessment to identify possible risks at each stage of the Secure Software Development Lifecycle (SSDLC), evaluating relevant mitigating controls and measuring residual risk.
- Collaborate with stakeholders to drive compliance with technology, information and cybersecurity policies and standards.
- Monitor and report on the effectiveness of technology, information, and cybersecurity risk controls, identifying any control weaknesses and recommending improvements.
- Prepare regular risk and control reports for senior management, highlighting key audit, risks, and control issues.
- Coordinate internal risk functions to ensure a unified approach to audit and risk management.
Must have skillset :
- At least 5 years of experience in IT cybersecurity risk management, implementation, and governance.
- Proficient with professional industry knowledge and experience in Information, Technology Risk, Cybersecurity risk management, and frameworks (e.g. NIST, COBIT, ITIL etc.).
- Experience in performing IT risk assessments, vendor risk assessments, audit, and operational risk issues management and recommending appropriate remediations for in-house developed applications, commercial off the shelf products and Cloud services/platforms.
- Experience in conducting regular awareness trainings for staff on cyber, information and technology risks (including policies, standards and relevant topics), periodically publishing security awareness articles and email phishing simulation campaigns etc.
- Strong influential, problem solving, analytical and interpersonal skills.
- Excellent written and communication skills.
Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.
