Responsibilities
The Technology Risk Manager ensures that the evolving technologies and services are compliant, secure, resilient, and robust. As a member of the Level1 Technology Risk Management team, you will be responsible for driving IT risk management initiatives including risk governance, regulatory inspections, internal & external audits and thematic reviews across the functions.
This role will focus on driving IT Asset Management to ensure accurate asset information and proper governance on life cycle of these assets to ensure cost optimization, compliance, security and operational efficiency.
Key Accountabilities
- Ensure IT asset management processes comply with internal governance policies, data security standards (ISO 27001, NIST, etc.), and regulatory requirements (especially in financial institutions).
- Develop and maintain ITAM policies, standard operating procedures (SOPs), and workflows.
- Provide regular reports to management on asset inventory, compliance status, cost savings opportunities, and lifecycle metrics.
- Partner with stakeholders within Site Reliability Engineering to assess and manage Technology Risks
- Engage with technology stakeholders to proactively identify risks at a detailed and technical level and ensure that IT is effectively driving remediation activities and to continuously improve IT risk posture.
- Work with technology stakeholders to design and implement technical risk mitigating measures.
- Perform thematic analysis and reviews on issues and risks.
- Assess regulatory (e.g., MAS, HKMA, CBRC, OJK, RBI, etc) changes impacting technology and drive related risk mitigation program with technology stakeholders.
- Proactive in forging effective engagement with key stakeholders on risk management, control, and governance matters
- Communicate and provide guidance of new policies and standards to stakeholders.
- Possess a degree, preferably in Computer Science, Engineering, Information Technology, or related discipline from a recognized University.
- Proficiency in ITAM/SAM tools (ServiceNow ITAM, Flexera, Snow License Manager, Ivanti).
- Professional Certification preferred – CISA/CISM/CISSP/CRISC/CBCP
- Minimum of 12 years of experience in technology
- Demonstrated experience in Identifying, assessing, and advising on technology risks in a regulated industry.
- Knowledge of the Banking Act – Banking Secrecy, Bank's policy and guidelines, Information Security Policy, Anti-Money Laundering, Cyber Security Act, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines etc.
- Excellent organizational, problem solving, interpersonal and operating skills to effectively drive the IT Risk agenda with IT functions.
- Experience to driving IT risk management in digital age a plus.
- Knowledge of Information Security, System Resiliency & Availability & Software development practices and frameworks preferred.
- Good technical competencies and exposure to infrastructure development, support, and management
- Demonstrated experience of leveraging data and analytics to get stakeholder buy-in is a plus.
We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.