Key Responsibilities
- Solicit, review, and deliver responses on information security processes and controls for:
- Regulatory exams
- External audits and meetings
- Surveys and questionnaires
- Attestations and internal audits
- Consult with internal stakeholders on alerts and advisories from regional regulators.
- Collaborate with stakeholders to identify, onboard, and submit non-financial regulatory report (NFRR) change requests related to information security.
- Assist the Regulatory Exam Management team in providing regional governance for potentially regulatory-reportable cyber incidents.
- Drive initiatives for the Regulatory Exam Management team based on the annual strategy.
- Ensure that team processes and playbooks are current, effective, and efficient.
Key Requirements
- Bachelor's degree in Information Technology or a related field.
- 5-7 years of experience in cybersecurity, risk management, or regulatory compliance.
- Strong operational mindset with attention to detail.
- Excellent analytical problem-solving skills and conceptual thinking.
- Comfortable presenting to executives and senior management.
- Understanding of information security principles, processes, and controls.
- Knowledge of APAC laws, rules, and regulations impacting information security.
- Excellent command of the English language, with strong verbal and written communication skills.
- Preferred certifications: CISSP, CISA, CRISC, or CISM.
