Job Description

Reporting to the Head of Technology & Security Risk, the Risk Analyst will be responsible for supporting operational security risk and issue management processes at a global level which will require significant business stakeholder management and a strong emphasis on continuous improvement of the technology risk framework.

The difference you will make

\xc2\xb7 Coordinate technology & security risk assessments using the defined technology & security risk management framework and associated processes.

\xc2\xb7 Ensure that global technology & security risks and issues are treated in line with the the company risk appetite, agreeing on suitable remediation plans where required.

\xc2\xb7 Maintain the technology and security risk registers and issues database at a global level.

\xc2\xb7 Track agreed-on treatment plans against targets for all global risks and issues, closely interacting with risk and issue owners to identify potential blockers and escalation points.

\xc2\xb7 Support risk forums including the monthly GRC Review and the Group Security Risk Committee - where required.

\xc2\xb7 Lead security issue management working groups with designated assessors and other stakeholders.

\xc2\xb7 Educate colleagues in technology and global functions on how to use the Riskonnect platform (and the company technology risk processes) for reporting new risk events and responding as action owners.

\xc2\xb7 Engage with global functions to understand their security risk exposure, identify new issues (and risks), and agree on actions to treat effectively and improve controls.

\xc2\xb7 Provide analysis on key risk areas to drive security maturity and help shape future investment decisions.

\xc2\xb7 Understand the external security environment and emerging trends to support security risk management.

\xc2\xb7 Support the growth and adoption of risk management processes across the the company group including the company DI Global Technology

Strong global presence|Good Career Advancement

What you\'ll bring

\xc2\xb7 Experience of technology and security risk management and assurance within a medium or large-sized organisation.

\xc2\xb7 Experience with internal security and technology risk and control assessments.

\xc2\xb7 Knowledge of all domains within security covering people, process and technology.

\xc2\xb7 Ability to explain technical complex concepts to non-technical audiences.

\xc2\xb7 Experience in stakeholder engagement and strong communication skills.

\xc2\xb7 Knowledge of security, technology and enterprise risk management frameworks (desirable).

\xc2\xb7 Experience with using industry-leading GRC platforms (desirable).

\xc2\xb7 Experience in developing and administering SharePoint environments is preferable.

\xc2\xb7 Experience in using Microsoft Excel, Microsoft PowerPoint, Microsoft Flow, Microsoft Forms, and Microsoft PowerBi (desirable).

\xc2\xb7 Is demonstrably self-motivated, proactive, action orientated to achieve deadlines.

\xc2\xb7 Interest in their own personal development within both the Security Risk team and other Security functions.

\xc2\xb7 Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC) (desirable).

\xc2\xb7 Proactive development of trending knowledge and skills within information security community.

Powered by 100% renewable energy, the company operates in over 145 markets worldwide with more than 46,000 dedicated specialists, and partners with 95 of the top 100 global advertisers.

The company operates on a hybrid model with the role based in our Kuala Lumpur office.

Michael Page