Responsibilities:

• Design IT business compliance assessment programs to evaluate the adequacy and effectiveness of the IT risk management and control functions of the Bank
• Conduct business compliance assessments to ascertain IT operational and control risks are operated and managed at an acceptable level within the risk thresholds of the Bank
• Identify and evaluate key IT risk and compliance issues with root causes and provide value-added recommendations for improvement
• Compile control review reports to highlight major IT risk and compliance issues for management attention and necessary improvement actions
• Assess the potential cybersecurity impact of emerging technologies and innovations.
• Identify control weaknesses in cybersecurity from a risk-based perspective
• Advise and communicate regulatory rules and requirements on IT risk and control management to stakeholders
• Review gap analysis reports to ensure compliance with new / revised regulatory rules and requirements and IT security / risk compliance within the Bank
• Provide technical advice and support to the compliance advisory and review teams
• Perform special / ad hoc assignments

Requirements:

• Degree holder in Computer Science or related fields
• Professional qualifications (e.g. CISA, CISM and CISSP)
• Minimum 8 years working experience in the IT compliance, risk management and audit professions, preferably in the banking industry
• Exposure to the areas of various computer platform, system development, IT security, quality assurance, infrastructures and networks
• Solid knowledge in IT risk, management and related regulatory rules and regulations
• Able to work independently and take up challenging assignments
• Effective communication and interpersonal skills