Lead, Technology Risk & Compliance

Affin Business Services; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Affin Business Services in Kuala Lumpur is seeking a professional to manage risk assessments and compliance documentation. Responsibilities include identifying regulatory requirements, overseeing the Risk Control Self Assessments, and coordinating key risk submissions.

The ideal candidate will ensure timely reporting of compliance issues and facilitate independent risk assessments. The role also involves close monitoring of compliance documents submitted to various authorities.

Responsibilities

• Collect information and review documentation for risk scenarios.
• Identify legal and regulatory requirements related to information systems.
• Perform submissions and reviews on Key Risk Indicators (KRI) and Risk Control Self Assessments (RCSA).
• Coordinate submissions on Technology Risk Dashboard.
• Collect and validate data for key risk indicators.
• Facilitate independent risk assessments and reviews.
• Review Department documentation prior to submission.
• Report compliance issues to respective BRCM.
• Monitor submission of Compliance documents and surveys.
• Undertake special/ad-hoc assignments as directed.

Job description

Job Responsibilities

• Collect information and review documentation to ensure that risk scenarios are identified and evaluated.
• Identify legal, regulatory and contractual requirements and organizational policies and standards related to information systems to determine their potential impact on the business objectives.
• Perform monthly/quarterly submissions and annual review on Bank/BNM Key Risk Indicators (KRI), Risk Control Self Assessments (RCSA), Compliance Self-Assessment Review (SSAR), Compliance Matrix (CMAX), Cyber Resilience Maturity Assessment (CRMA) and Management of Customer Information and Permitted Disclosures (MCIPD).
• Coordinate submissions on Technology Risk Dashboard on a monthly basis to Technology Risk Management team and send all Risk & Compliance communications to Technology Staff on an ad hoc basis.
• Collect and validate data that measure key risk indicators (KRIs) to monitor and communicate their status to relevant stakeholders in their decision‑making process.
• Facilitate independent risk assessments and risk management process reviews to ensure they are performed efficiently and effectively.
• Review all the Department’s documentation related to Risk and Compliance prior to submission to BRCM (for example: Master Service Agreement / renewal Agreement / Letter to BNM / Guidelines and Procedures / Due Diligence Checklist / Cloud Risk Assessment / Material Risk Assessments etc.) and provide advisories to IT Project Managers.
• Timely reporting/escalation of any compliance issue/breaches to respective BRCM and submission of Lost Event Report via GCM System for IT related Priority1 &2 incidents.
• Close monitoring of submission of Compliance documents reviews, surveys for BNM and PayNet queries/updates and BNM Reviews to ensure that they are done within agreed timeline.
• Any special assignment to undertake special/ad-hoc assignments as and when directed by Head, Governance Risk & Compliance (GRC).