IT RISK OFFICER - CONTRACT

Professional and Technical

• 6 to 7 years of experience, in the areas of Information Technology, Risk Governance or Control, Security or Audit related functions
• Banking experience, preferably in Wealth Management. Sound understanding of various business functions
• Strong technical skills. Experience in IT delivery or implementation and having a good understanding system design is a plus
• Independent worker, team player • Preferred certification: CISSP, CISA

Regulatory

• Familiar with local regulatory environment in Singapore and Hong Kong • Experience in interaction with regulator preferred

Service Offering

• Manage IT regulatory remediation project and validate IT remediation actions

• Support the rollout of IT risk management strategy, framework and standard(s) in Asia Support day to day IT Risk management activities in Asia including: Maintenance of the central risk register

• Tracking of risk mitigation plans and

• Follow up on risk remediation and/or mitigation plans

• Assist in preparation of risk reporting to IT Risk Management Forum as well as Operational Risk Committees in Singapore and Hong Kong.
• Perform regulatory (MAS and HKMA) and security related assessments, review technical control effectiveness, identify gaps and follow up on actions
• Perform and execute internal control plans
• Review application security concept design as part of project implementations
• Work with external and internal audit to facilitate fieldwork and tracking of IT related audit items
• Handle routine security related tasks e.g. password management, review of requests Drive a positive risk culture through training, communication and collaboration
• Prepare materials for periodic IT Risk Awareness trainings

Regulatory Responsibilities &/OR Risk Management

• Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations