Consultant, Technology Risk, Enterprise Risk Management

Roles and Responsibilities:

Provide exceptional support and advice to all stakeholders in:

. Technology Risk Advice and Guidance: Provide risk, control and compliance advice to stakeholders at all levels.

. Policy and Framework Implementation: Provide support in implementing the Group/ AIAS technology risk (including AI risk) framework and policy requirements.

. Risk Profiling: Facilitate the identification and assessment of risks and controls. Facilitate regular reviews and updates to established risk profiles based on trigger events.

. Controls - Assist Technology to design, assess and measure a control environment that mitigates the risks, meets regulatory obligations, and complies with internal policies.

. Incident management - Provide guidance and support in performing incident root cause analysis and identifying control breakdowns for technology related incidents.

. Key indicator and trend analysis: Implement risk & control data analytics. Define and build KRI reporting to support effective risk reporting.

. Reporting: Provide regular reporting to Board and senior management on technology risk and security matters.

. Project Risk: Provide risk advice on major Technology and Business initiatives to ensure that Group/AIAS Security requirements are met, and the appropriate controls are implemented.

. Training and Awareness: Increase Technology Risk awareness and enhance risk culture across the organization via regular training sessions.

. Regulatory and Audit Engagements: Assist with IT related regulatory inspections and internal/external audits.

Minimum Job Requirements:

You possess a can-do attitude and exceptional communication skills for this highly visible role. You will also:

. Possess 8+ years of technology risk management experience preferably in the insurance or financial services sector with a Bachelor or Master's degree holder in Information Technology, Risk Management or related disciplines

. Solid understanding of current/emerging enterprise technology (eg cloud, DevOps, artificial intelligence, machine learning technologies, data science etc.) and security regulations, frameworks, standards and controls, including MAS requirements and controls.

. Experience in developing policies or establishing governance frameworks, including those related to AI risk management.

. Ideally have hands on data analytics expertise to enable deep analysis and proactive identification of emerging risk and control issues.

. Relevant certifications essential e.g. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC)

. Knowledge of relevant programming languages / tool sets such as Python, PowerBI, Office 365 etc and experience in first line technical roles such as developer, programmer, architect, software engineering, data analysts will be an advantage.