The Role
Provides advisory, independent assurance, and validation that CIMB Group complies with regulatory technology risk management policies and its approved TRM framework. The role supports effective identification, governance, and management of IT and cybersecurity risks across the organization.
Summary Generated by Built In
Key Responsibilities:
- Support the implementation of compliance with the Operational Risk Management Framework (ORMF), Technology Risk Framework (TRMF), Cyber Resilience Framework (CRF), Cloud Risk Management Framework (CRMF), Emerging Technology Risk Framework (ETRF), AI/ML Risk Framework and P&P, Technology Risk Appetite Statement (TRAS) and BNM Risk Management in Technologies (RMiT) to effectively manage technology related risks, enhance technology resiliency and mitigate risks against technology threats across CIMB Group.
- Independently review and challenge control issues raised by the First Line of Defense (1LoD) to ensure accurate issue identification, root cause analysis, impact assessment, and issue rating.
- Assess the adequacy, completeness, and feasibility of remediation plans and closure evidence.
- Review issue resolution timelines and challenge unreasonable or unsupported target dates.
- Monitor aged, overdue, and high-risk control issues and escalate material concerns to relevant governance committees.
- Independently assess Control Issue Acceptance requests submitted by business units.
- Verify that all feasible remediation alternatives have been adequately evaluated before risk acceptance is considered.
- Work closely with Business Unit Control Officer (RCO) &/or DCORO to address key technology risks, controls and events, as part of existing Business Unit RCSA.
- Facilitate in preparing the Technology Risk Dashboard with objective to have one view of Risk Posture
- Major incident management review (Review LED) & BDSF
- Management and monitoring of Technology Key Risk Indicator and Technology Risk Appetite Statement (RAS)
- Risk hotspot – to highlight immediate key risks area to watch (Immediate, High, Medium and Low) pertaining to Technology, Cyber, IT in 3rd Parties, AI and Cloud.
- IT 3rd Parties Risk Management support
Job Specification
- Roll-out and enforce and TRMF, P&P and RMiT
- Validate effectiveness of security controls
- Provide assurance on technology risk
- Conduct independent risk assessment
- Review and challenge 1LOD risk assessment
CIMB Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about CIMB and has not been reviewed or approved by CIMB.
-
Parental & Family Support — Parental leave and family resources are presented as particularly strong, including up to six months paid maternity leave in Malaysia, up to 30 days paid paternity leave, adoption leave, lactation rooms, and childcare facilities. Targeted assistance is also noted for single parents and those with children who have special needs.
-
Healthcare Strength — Health coverage is broad, with medical plans, mental-health services, wellness programmes, health checks, onsite clinics or dentists in some locations, and disability insurance. In Malaysia, a 24/7 emotional-wellbeing careline and access to mental-health professionals and other coaches are also highlighted.
-
Flexible Benefits — Benefits are described as customizable through a flexible-benefits programme, allowing employees to tailor coverage toward medical care, family support, or wellbeing needs. Flexible work options such as hybrid working and adjusted hours are also part of the package in many locations.
CIMB Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
CIMB Group is a leading ASEAN universal bank, one of the largest Asian investment banks and one of the world's largest Islamic banks. We are headquartered in Kuala Lumpur, Malaysia and offer consumer banking, commercial banking, wholesale banking, Islamic banking, and asset management products and services. As the fifth largest banking group in ASEAN, we have over 36,000 staff in 16 locations across ASEAN, Asia and beyond. CIMB Bank and CIMB Islamic Bank are members of PIDM.
.jpeg)
