AVP/SA, Security Regulatory and Compliance Lead, Information Security Services, Group Technology

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Act as first Line-of-Defense (LoD) and focal point for the team risk and control matters.
• Coordinate and run programs to enhance the risk posture throughout the Bank and department.
• Support day-to-day operations by managing approvals, risk reviews, process refinements, SOP development and reporting.
• Review exisiting processes for improvements through automation and templatizing of documents to enhance efficiency and ease of use.
• Collaborating across units to drive risk reduction and mitigation initiatives.
• Review identified issues, action plans proposed and verify remedial solutions for closure.
• Work with Line managers and oversee risk mitigation programs to remediate control gaps identified from root cause analysis and lessons learnt.
• Develop framework and metrics to support the department risk mitigation programs and escalate emerging or at-risk issues to the relevant stakeholders in a timely manner.
• Manage risk reviews and assessments, control testing, analysis of key risk indicators to review effectiveness of internal controls and to ensure risk exposure over the key processes are within risk appetite and comply to the bank’s standards.
• Ensure proper documentation on risk mitigation programs from the department.
• Provide support and training to foster strong risk culture and risk awareness within the department.

Audit, Regulatory, Compliance

• Manage internal / external audits, regulatory reviews and act as audit focal point for the department;
• Coordinate, collate and review responses to regulators on notices, advisories and queries; and
• Tracking and reporting status to the team and provide management updates in management forums.

Legislation, regulations and policies 

• Assist in the Bank’s cybersecurity program including cyber security policies, regulatory audits, compliance management, metrics, risk and performance indicators and reporting to senior management; 

• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the Bank’s security policy architecture; and

• Work with regional information security services teams in the core markets to monitor new cybersecurity legislation and/ or regulation, and assess the impact against the Bank’s security policy architecture.

Requirements

• At least three (3) years’ experience in technology development and support environment, vendor management, technology implementation or technology risk management.
• Prior working experience / knowledge in the following areas :
  • Technology and operational risks lifecycle management
  • Managing IT Audits / Governance / Risk Management programs
  • Performing deep-dive investigation for control and process issues.
• Communicating risk and control findings with key stakeholders, developing recommendations and provide accurate metrics and management reports.
• Well versed with governance and control frameworks
• Sound understanding of technical processes, policies and risk measurements.
• Good control mindset and the ability to understand a broad range of operational and technical issues
• Strong analytical, problem-solving skills and meticulous
• Strong communication, interpersonal and written skills; able to communicate with stakeholders, higher management, technical support units and users.
• Influential in communication, able to drive towards agreed solution.
• Able to work independently with minimal supervision and with a positive attitude
• Experience in utilizing programming skills to analyse data to facilitate risk reviews and assessments.

Location:

Job:

Schedule:

Employee Status: