Technology Risk Manager (Banking)
Job Description
a Chinese majority-owned commercial bank headquartered in Beijing and one of the largest banks in the world.
The Role:
Assumes the direct accountability of the technology risk management activities and ensures the branch satisfies the technology risk management provisions of the Bank and local regulators.
Responsibilities:
- Establish and maintain local technology risk and information security-related implementation rules, procedures, guidelines, and local regulatory requirements. 11 domains include IT Governance, information asset management, use of cryptography, security management, physical and personnel security, system development and change management, information processing, communication networks, management of service providers, cyber security controls, and others.
- Ensure all employees are aware of and comply with various technology risk management and information security policies, administrative measures, and relevant standards, guidelines, and rules.
- Regularly collect and analyze IT-related supervisory information from local regulatory authorities and relay this information to the Branch.
- Pursuant to local regulatory requirements, perform the reporting, filing, and approval procedure for all material IT-related supervisory matters. Before response, should fully communicate with the leading unit of TRM. All responses should also be properly filed to the leading unit of TRM
- Establish and maintain respective TRM implementation guidelines based on the management requirements of the branch.
- Carry out regular technology risk assessment, and perform technology risk identification, assessment, monitoring, control, and reporting of its own and its service providers.
- Take the lead in coordinating with all departments and units of the branch to ensure the implementation of the first line of defense of technology risk management.
Qualifications:
- Bachelor's degree in Computer Science, Management Information Systems, Software Engineering, Computer Programming, and Systems Analysis.
- Over 5 years of experience in IT security, Technology Risk, Risk Management, Compliance, or IT Audit function, gained from other sizable financial institutions
- Solid experience with IT Audit and regulatory requirement compliance
- Have one or more of the following certifications: Certified information systems security professional (CISSP), Certified Information Security Manager (CISM) Information Technology Infrastructure Library (ITIL), and/or Certified Information Systems Auditor (CISA).
- Must be knowledgeable in MS Excel Macro, including calculations (vlookup, pivot, etc.)
- Have one or more of the following certifications: Project management professional (PMP), Certified in the Governance of Enterprise IT (CGEIT) is a plus.
- Strong communication skills, good in both written and spoken English.
- Experience in analyzing and mitigating security-related issues and threats.
- Excellent analytical and problem-solving skills to identify and respond to unexpected or disruptive events.
- Good working knowledge of Powershell or other scripting languages for automation.
- Familiarity with ITILv3 or ITIL v4.
- DevOps experience is a plus
- Excellent written and oral English communication skills.
Work Setup:
- Shift: Day Shift
- Setup: Onsite
- Location: BGC, Taguig PH
By Applying, you give consent to collect, store, and/or process personal and/or sensitive information for the purpose of recruitment and employment may it be internal to Cobden & Carter International and/or to its clients.
