Identify, assess, and mitigate IT risks and vulnerabilities. Conduct first-line defense inspections and follow up on issue rectification.
Take the lead in response of TRMG gap analysis and other regulatory requirements, verify the implementation of regulatory compliance requirements, and ensure compliance of the branch's IT risk work. Collaborate with internal control and audit teams on risk and compliance activities.
Lead and organize IT outsourcing management activities, including vendor due diligence and annual reviews.
Conduct cybersecurity protection and ensure compliance with data security regulations. Develop and implement security policies and data protection measures. Deploy and maintain security platform tools to support information system security.
Support the implementation and use of IT risk monitoring tools and quantification systems.
Develop and deliver IT risk and security training at the branch level.
Job Requirements
Bachelor's degree or above in Computer Science, Information Technology, or a related discipline.
Minimum 5 years of experience in system/network administration or IT risk management, preferably within a banking, financial services, or large-scale enterprise environment.
Strong sense of ownership, risk awareness.
Able to communication effectively both written and spoken in English & Chinese with internal/external stakeholders and Head Office.
Attention to details, with the ability to thoroughly and accurately review IT policies, process, reporting and audit responses.
Relevant professional qualifications and certificates like CISSP, CISA, etc.
Knowledge of regulatory requirements and industry practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, ISO27001 etc.)
