Job Description

• Define, revise, and oversee comprehensive technology, cybersecurity, and data management policies across the entire bank, in collaboration with various technology and business departments.
• Ensure consistent implementation of these policies throughout the bank and actively monitor adherence to the established guidelines.
• Conduct risk identification and assessments within the realms of technology, cybersecurity, and data governance.
• Supervise the bank\'s technology and cybersecurity risk management initiatives.
• Oversee technology and cybersecurity risk assessments for third parties, including service providers and partners, as needed.
• Collaborate with technology and business units to guarantee compliance with policies and regulatory mandates.
• Engage in risk monitoring, including ongoing evaluations to assess compliance with technology and cybersecurity risk standards, such as RCSA (Risk Control Self-Assessment) and KRI (Key Risk Indicator).
• Initiate and execute continuous improvements to the risk monitoring processes.
• Stay vigilant regarding new regulatory requirements, conducting gap analyses against fresh regulations and guidelines.
• Monitor the evolving risk landscape and emerging threats to the bank, gaining insights into evolving risks and novel technologies for risk management.

Job Requirements

• Over 7 years of relevant experience in either cybersecurity or information technology risk management.
• Possess a robust comprehension of industry best practices, policies, and standards within the banking sector, particularly in the realms of technology and cybersecurity risk management, as well as data governance.
• Demonstrate a solid understanding of regulatory mandates issued by organizations like MAS and other financial regulatory bodies within the region.
• Have practical experience in conducting technology and cybersecurity risk assessments, compliance assessments, and audits.
• Demonstrate hands-on experience in overseeing internal and external audits, as well as regulatory engagements.
• Possess practical experience in leading technology and cybersecurity risk programs.
• Ideally, hold certifications such as CISA, CISM, CRISC, or CISSP.

EA Licence No: 11C5502
Registration No: R1876903

eFinancialCareers