Manager - Risk Management (Technology Risk Management)

Job Purpose Summary

Contribute to ensure effective management of technology risks by business and IT departments (including IT Security department) of Hong Leong Bank (HLB) , including its overseas branches and operations**.**

Key Responsibilities and Accountabilities

1. IT Risk Management Framework & IT Policies

• Assist to enhance and implement bank-wide IT Risk Management Framework
• Review and provide advisory on adequacy of IT policies and procedures

2. IT Project Risk Analysis

• Review and enhance IT Risk Assessment (ITRA) template

• Perform IT risk review on key projects, review accuracy of risk scoring and adequacy of risk mitigation plans

• Escalate project risk issues (IT risks) to Working Group Committee and Project Steering Committee.

3. IT Operations Risk Analysis

• Review accuracy of risk scoring and adequacy of risk mitigation plans under the IT RCSA (Risk & Control Self- Assessment) exercise.
• Perform thematic assessment on identified technology risk areas and as per regulatory guidelines’ requirements, and thereafter to document observation reports for update to Management

4. Risk Monitoring and Reporting

• Define technology Key Risk Indicators for proper risk monitoring.
• Design and enhance IT risk dashboard for management reporting
• Provide advice and early warning alerts to management base on emerging security threats trend

Jobholder Requirements

• Degree or Masters in Information Technology or Computer Science (Majoring in IT Security will be an added advantage)
• 5 years and above of working experience in information technology, IT audit or IT Security
• IT Governance, Risk and security related certifications will be an added advantage.

Special Skills

Good level of skills/knowledge are expected in the following areas :

• IT Project Governance; IT Security Management; IT Operational Process Management
• Analytical skill; Technical documentation skill
• Time management and planning skill
• People management skill