Manager, IT Supervision | Risk Specialist and Technology Supervision Department

ROLE PURPOSE

1. To plan, organise, and supervise the risk of information technology (IT) through continuous surveillance of FIs in ensuring financial stability and to address IT risk aspects of regulatory applications in order to facilitate appropriate and consistent compliance with supervisory strategy; the Financial Services Act 2013/Islamic Financial Services Act 2013; and all applicable Policy Standards.
2. Responsible to assess IT risk vulnerabilities within FIs through on-site and continuous monitoring, and to initiate preventive and remedial actions in achieving the Bank's strategic outcome of no disruptive IT failure, especially for Tier 1 FIs.
3. Outcome of deliverables should align towards the achievements of the Bank's strategic results.

PRINCIPAL ACCOUNTABILITIES (Key responsibilities and tasks that the role performs)

• Leads/manages/drives a team in assessing the IT risk nature and IT health/condition of FIs, by undertaking IT risk assessment for effective supervision, to timely detect supervisory concerns and emerging risks, and effectively communicate any concerns together with the appropriate recommendations on supervisory measures to be undertaken. Also manages/ensures that the team's performance meets the agreed standards and deadlines, which allows all necessary supervisory documentation of FIs being assessed be duly completed and timely made available.
• Leads/manages/drives the continuous monitoring activities to facilitate detection of potential problems, risk exposures and emerging supervisory concerns pertaining to IT. Ensures that FIs comply with the IT risk aspects of various regulations, rules and policies issued by BNM, and recommends remedial actions arising from concerns and/or breaches of compliance.
• Leads/manages/drives a team in undertaking IT risk assessment of formal applications received from FIs and provides the appropriate recommendations in a timely manner.Ensures assessment of applications is comprehensive, appropriate and consistent with applicable laws, regulations and all applicable Policy Standards, and decisions are to be in accordance with approved supervisory and governance framework of the Bank.
• Builds strong collaboration internally and externally in obtaining and providing information necessary to facilitate continuous surveillance and effective supervision of IT risk.
• Provides tactical and strategic leadership to team members. Coaches and develops staff to meet personal and corporate goals.
• Provides feedback/inputs/expertise to other departments in the Bank on policy developments, projects, etc., whenever needed.
• Undertakes other ad-hoc assignments, when assigned.

QUALIFICATIONS

• Academic Qualifications: A postgraduate/undergraduate degree or a professional qualification in information technology related disciplines, with primary focus on IT security and/or auditing. Alternatively, a postgraduate/undergraduate or a professional qualification in accounting; banking; finance; business studies; commerce; engineer; or risk management discipline, can also be given a careful consideration.
• Experience: 7 -10 years of experience in IT security and/or auditing, within the context of the financial industry.