Roles & Responsibilities
Identify Key Controls and Design Test Strategy
- Assess the existing processes in Enterprise IT Operations, Projects and security against COBIT & ITIL practices Head Office Policies and Rules, Local IT Regulatory requirements and MAS TRMG guidelines and identify the key controls for testing
- Define required controls, objectives, checklists and procedures for effective risk management and ability to write risk statements surrounding the IT controls
- Highlight key concerns to mitigate technology risk and conduct root cause analysis
- Partner with key stakeholders to define regular reviews against defined IT controls
Mitigate Risks and Resolve Deficiencies
Establish and upkeep the list of Checklists on IT Operations, Technology Projects and IT Security with respect to the current processes / procedures defined.Plan and initiate IT Controls Checking Assignment with stakeholders and process owners in accordance with the IT Controls Objectives.Highlight areas of non-compliance and ensure required mitigation by teamsUnderstand overall IT risk profile to identify and prioritize areas of improvement / risk mitigation to define an improvement / mitigation roadmapEngage with stakeholders to socialize / plan out the roadmap and form core teams for mitigationProactively identify and escalate any delays / risks for timely resolutionFoster a continual improvement culture with communication to stakeholders and guidance on risk & controlsRequirement :
More than 10 years of experience in Banking domain with the last 5 years till current is in IT Tech Risk / IT Tech Control or IT Compliance capacityWorking Knowledge of IT security, Risk Management and Security Control and experience in designing IT test steps to determine IT control effectivenessA sense of initiative and proactive action is expectedExcellent written and verbal communication skills,Certification (either of the following)
Certified Information Security Auditor (CISA)Certified Risk and Information Systems Control (CRISC)ISO27001 Certified auditorCertification Good to have
ITIL certificationPMP certification