Manager - IT Risk

Ensure compliance to the MAS Notices and Guidelines including but not limited MAS Notice 644 on Technology Risk Management; MAS Guidelines on Technology Risk Management and MAS Notice 655 on Cyber Hygiene;

Ensure compliance to HLBB/ HLBS IT Governance, Policy and Procedures including the IT, cyber & security standard.

Ensure proper process established by stakeholders to track and monitor Cyber, IT Security & IT incidents including adequate & timely escalation, proper tracking of remediation actions and closure and validation of closure action items

Review and ensure adequacy of the due diligence performed by business owner of outsourcing and other non-outsourcing service providers

Conduct independent review on Risk and Control Self-Assessment (“RCSA”) of IT Department and other departments assigned by the Management.

Conduct independent validation of gap review performed by stakeholders against the new/revised IT regulations; relevant regulatory self-assessment and ensure that gaps are identified and addressed according to the timeline.

Preparation of reports to ensure the Senior Management Committee including Head of Department meeting, Risk & Compliance Governance Committee & Regional Risk Management Committee have adequate oversight of the cyber risk, system stability and monitoring of the risk appetite within the HLBB/HLBS.

Ensure consistency of IT Risk Management policies, methodologies and process within the HLBB/HLBS by conducting annual SOP review, gap review performed by IT department against the published regulations and exposure drafts.

Other tasks and projects assigned by Management from time to time.