Job Description

Role Responsibilities Strategy Responsible for defining and operating a control environment for people, process and technology that enables the domain to reduce operational and cyber security risk to a level within the Group\'s risk appetite while satisfying control objectives defined in relevant Group policies and external regulations. This role will partner closely with TTO Risk &Controls, CISO, CISRO, Group Operational Risk and Group Internal Audit and will be required to manage all aspects of initiatives emanating from same for this domain. Additional responsibilities include Proactive Controls Assessment, Issue Management, Audit and Regulatory Inspection Facilitation and other related tasks. The exceptional candidate will also endeavour to understand the larger business context within with TTO operates and advocate for technical solutions that help the business meet its strategic objectives. People and Talent This role is an individual contributor role. Our Ideal Candidate The successful candidate should have 8-10 years of experience in Technology Risk Management, Information Security or other related roles. The preferred candidate will have experience in Financial Services or other heavily regulated industries (e.g. Pharmaceuticals, Healthcare, etc.). Clear, Concise and Articulate communication of complex and conceptual topics is required for success. In addition, the following qualifications are preferred: Relevant industry certifications (e.g. CISSP, CRISC, CISA, etc.) Experience with Technology Implementation or Operation Hands on experience with Control Design and Implementation Understanding of the Audit lifecycle Knowledge of relevant Technology and Business Regulations; ideal candidate has direct experience of interface with Regulators (principally PRA, MAS and HKMA). Knowledge of and/or hands-on experience of Technology Architecture Comfortable with ambiguity and able to make decisions in spite of same Process Design and Analysis Documentation and Textual Analysis Data Analytics Experience negotiating with and influencing technical and/or senior stakeholders .

foundit