Technology and Cyber Risk Governance Lead

The day to day activities:

1. Responsible for second line function (2LoD) in technology and cyber risk governance.
2. Develop and maintain the cyber risk frameworks, policies and standards based on prevailing regulatory requirements and industry best practices.
3. Promulgate and drive adherence with the framework, security policies and standards.
4. Actively maintain technology and cyber regulatory obligations to ensure continued compliance, as well as track and report material non-conformities and potential breaches.
5. Drive and oversee technology and cyber KRI reporting activities and to ensure adherence with the risk appetite.
6. Serve as a subject matter expert to business and technology teams on technology and cyber risk matters.
7. Lead and / or take part in technology and cyber risk governance working groups and/or committees.
8. Engage in internal and external audits, as well as regulatory examinations/inspections, with focus on technology and cyber risks.
9. Drive collaboration with 1LoD stakeholders including Technology, Data and Product teams to track and manage key risks and issues on a regular basis, and to provide periodic management updates to the relevant Risk committees.
10. Support regulatory incident reporting to the authorities upon confirmation of relevant incidents.
11. Provide constructive challenge to post-mortem root cause analysis to ensure adequacy and efficacy of remedial or risk treatment plans to prevent recurrence.
12. Conduct independent testing of IT and Cybersecurity Controls as part of periodic RCSA requirements.
13. Uplift technology and cyber risk awareness through various educational and employee engagement channels.
14. Responsible for overseeing third party security risk assessments of the org third parties and partners.
15. Work with internal stakeholders including Procurement, Legal, Data Governance, Compliance and Data Protection Officers to ensure integration of mandatory information and cyber security requirements in the contracts with service providers.

The must-haves:

1. Degree in Computer Science or Technology-related field.
2. Minimum 8-10 years experience in a similar second or third line role with another regulated financial institution or TechFin / Fintech firms.
3. Relevant and direct exposure or interaction with financial regulators is preferred.
4. Solid, articulative verbal and written skills with proficiency in English.
5. Stakeholder management skills such as negotiation and conflict management skills.