Information Technology Risk Manager

The Role:

• Operationalize and maintain IT Risk Management and Cybersecurity framework, policies and standards to ensure effective IT risk compliance within the organization.
• Ensure Board of Directors and Senior Management Committee have adequate oversight of the cyber risk management profile to ensure proper measures are put in place in managing the risk to the organization, its employees, customers, reputation, assets and interests of stakeholders (shareholders, regulators).
• Conduct regular technology and cyber risk assessments to monitor compliance with technology and cybersecurity policies to ensure effective and timely implementation and management of IT project risk assessment
• Provide independent technology and cyber risk assessment on system readiness and development, new tools and platform.
• Support in the assessment of outsourcing and third-party service provider Technology and Cyber due diligence.
• Work with Group to review and develop organization technology road map for the organization.
• Conduct risk related trainings to foster strong risk culture.
• Manage and support internal / external audits and regulatory reviews for the organization.
• Support operational risk management initiatives including Incident Management, Business Continuity Management, Risk and Control Self-Assessment (RCSA) etc.

Skills and Experience:

• Bachelor's degree in information technology / computer science and equivalent
• Minimum 6 years experience on IT Risk
• Familiar with industry recognized risk framework
• Familiar with MAS requirements on TRM and Cyber Hygiene
• Experienced in dealing with internal and external auditors