IT Risk Officer

About the client

They are one of the largest key wealth management providers in the region. Their Asia footprint covers major cities in the region including booking centres in Hong Kong and Singapore, offices in Shanghai, Mumbai and other key cities in India.



KEY FEATURES OF THE POSITION

IT Risk Management

• Maintain the central risk register for Asia

• Support and assist risk owners to develop risk mitigation/remediation strategies for High, Medium and Low risk items

• Maintain oversight of risks mitigation / remediation plans of High, Medium and Low risk items

• Work closely with IT Project Managers to identify, mitigate and treat residual risks arising from projects

• Collaborate with Information Security function to support implementation and/or mitigation of Cyber risks

• Prepare risk reporting materials to be presented at IT Risk Management Forum and Operational Risk Committees

• Perform internal control validations and highlight exceptions for remediation

• Track, monitor and report on status of controls

• Provide IT risk awareness trainings

• Support IT teams in responding to external and internal audit queries. Review audit reports and provide audit responses

• Track audit remediation plans to ensure timely and proper closure of IT audit points

KEY FEATURES and accountabilities

Client Management (internal & external)

• Various IT functions, both regionally and globally

• Operational risk (CRO)

• Local Legal and Compliance functions

Business Management

• Key local stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers

• CRO functions including Business Operational Risk, Information Security and Compliance functions

• Global functions IT Risk Management , Information Security

• Establish strong relationship with key stakeholders

SKILLS REQUIREMENTS

Professional and Technical

• 7 to 9 years of experience, in the areas of Information Technology, Risk Governance or Control, Security or Audit related functions

• Banking experience, preferably in Wealth Management. Sound understanding of various business functions

• Strong technical skills. Experience in IT delivery or implementation and having a good understanding system design is a plus

• Independent worker, team player

• Preferred certification: CISSP, CISA