Risk Management Specialist

Job Purpose Summary

• Carry out governance and compliance activities within Group Technology, fostering a strong compliance culture.
• Manage and maintain the efficiency and quality assurance of internal processes and controls.
• Ensure IT regulatory requirements are met and IT risk and compliance management practices are effectively embedded.
• Evaluate quality inspection outcomes, prioritize gaps, and propose corrective measures to maintain operational integrity and service excellence.
• Manage IT lifecycle management and responsible for driving the strategic direction and operational excellence of the IT Lifecycle and Optimization functions, which includes managing IT Asset and Capacity Management.

Risk and Governance:

• Maintain tracking of all IT risk, audit, assessment and review conducted by internal (risk, audit), external and regulators to ensure timeliness of responses and remediation.
• Conduct IT risk & governance assurance activities to strengthen overall IT compliance. Monitor and manage IT process, risk, compliance, and governance capabilities.
• Communicate IT governance, risk, and compliance requirements to internal and external stakeholders.
• Collaborate with internal functional areas and third-party vendors to conduct IT risks and compliance review.
• Stay updated on IT related regulatory requirements and ensure alignment and compliance.
• Enforce relevant IT policies, standards, and procedures in compliance with regulatory requirements (eg. RMiT).
• Ensure governance and compliance by conducting review and assurance based on related standards, policies, and procedures.
• Manage IT process improvement, including documentation, objective reviews, and evaluations.
• Manage quality assurance, including standards, processes, improvement activities, and independent assessments.
• Maintain a knowledge base of IT-approved policies, procedures, manuals, and guides.
• Provide regular update to management and relevant committees on IT risk and governance status.

IT Asset & Capacity Management:

• Establish and maintain a comprehensive IT asset and capacity management framework, encompassing hardware, software, and cloud resources, throughout their lifecycle (acquisition, deployment, maintenance, retirement).
• Ensure accurate and up-to-date asset inventory, IT capacity planning, tracking, and documentation.
• Optimize asset, capacity utilization and identify opportunities for cost reduction, and manage risks associated with IT assets, including the proactive management of IT asset obsolescence and end-of-life cycles.
• Oversee software license compliance and ensure adherence to vendor agreements.
• Monitor infrastructure performance and identify potential capacity bottlenecks, recommending and implementing proactive solutions.
• Conduct regular capacity planning assessments, forecasting future capacity requirements based on business growth and technology advancements.

Stakeholder Management & Collaboration:

• Maintain strong working relationships with key stakeholders across Group Technology, regional and regulator
• Communicate effectively with stakeholders on IT process, risk, compliance and governance.
• Collaborate with other IT teams to ensure risk and governance are well managed.

Organizational (organizational responsibilities)

• Participate and display team work in all aspect of work, projects, assignments and initiatives roll out by Group Technology at all times.

Experience

• Minimum 5-7 years IT experience, with significant experience in IT Governance Assurance, IT Risk & Compliance, IT Process Management, IT Asset and Capacity Management.
• Good track record of managing IT guidelines, standards, policies, and procedures.
• Excellent knowledge and understanding of IT infrastructure, applications, governance & assurance best practices,
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication, presentation, and interpersonal skills.
• Excellent in Microsoft excel, power point and power BI skills.
• Experienced in the financial services industry, preferably in the banking industry

Certification/Licensing Requirements

• ITIL
• CRISC
• CISA
• CISM
• CGEIT