Manager - Risk Management (Technology Risk Management)

If you are looking to excel and make a difference, take a closer look at us…

Job Purpose Summary

Contribute to ensure effective management of technology risks by business and IT departments (including IT Security department) of Hong Leong Bank (HLB) and Hong Leong Islamic Bank (HLISB), including its overseas branches and operations.

Key Responsibilities and Accountabilities

1. IT Risk Management Framework & IT Policies

• Assist to enhance and implement bank-wide IT Risk Management Framework
• Review and provide advisory on adequacy of IT policies and procedures

2. IT Project Risk Analysis

• Review and enhance IT Risk Assessment (ITRA) template
• Perform IT risk review on key projects, review accuracy of risk scoring and adequacy of risk mitigation plans

• Escalate project risk issues (IT risks) to Working Group Committee and Project Steering Committee.

3. IT Operations Risk Analysis

• Review accuracy of risk scoring and adequacy of risk mitigation plans under the IT RCSA (Risk & Control Self- Assessment) exercise.
• Perform thematic assessment on identified technology risk areas and as per regulatory guidelines requirements, and thereafter to document observation reports for update to Management

4. Risk Monitoring and Reporting

• Define technology Key Risk Indicators for proper risk monitoring.
• Design and enhance IT risk dashboard for management reporting
• Provide advice and early warning alerts to management base on emerging security threats trend

Managerial

Be a good team player to ensure strong team spirits and deliver quality results

Organizational

Inculcate proactive technology risk management culture in the Bank

Jobholder Requirements

• Degree or Masters in Information Technology or Computer Science (Majoring in IT Security will be an added advantage)
• 3 years and above of working experience in information technology, IT audit or IT Security
• Prior working experience in the area of IT Risk Management will be an added advantage
• Fresh graduate can be considered.

Special Skills

Good level of skills/knowledge are expected in the following areas :

• IT Project Governance
• IT Security Management
• IT Operational Process Management
• Analytical skill
• Technical documentation skill
• Time management and planning skill
• People management skill

Certification/Licensing Requirements

• IT Governance, Risk and security related certifications will be an added advantage.