Senior Manager, Technology Risk Management
Eastspring is a global asset manager with Asia at its core. We create a culture in which diversity is celebrated and inclusion assured, for our colleagues, customers, and partners.
ROLE OVERVIEW
This role will be a key member of the centralised Second Line Technology Risk Oversight team reporting into the Head of Technology Risk Management. The role is responsible to support the independent oversight, challenge and governance of the technology and cyber risks (“TRM”) across Eastspring ensuring effective risk management practices across the company.
PURPOSE
- Execute risk oversight and governance in line with defined frameworks and requirements across all TRM domains and all businesses to ensure the company is in line with risk appetites, policies and standards and regulatory requirements.
- Support the First Line in Technology Risk related matters by providing independent advice with collaboration from a Second line perspective to solve issues.
- Support in the management of key internal stakeholders on TRM matters, working together with the First and Third Lines to ensure strong risk culture and effectiveness of the lines of defence.
- Support in the preparation of independent risk reporting on TRM risks commensurate with the business for all applicable forums and committees or on an ad hoc basis as required.
- Execute the roll out Prudential information and technology risk frameworks, policies, processes, and other Prudential wide TRM related Second Line initiatives for Eastspring.
- Deputy for the Head of Technology Risk Management where required
KEY ACCOUNTABILITIES
Implement the Prudential Technology Risk related frameworks and policies, and support in development of Eastspring governance documents as required to effectively execute the TRM Team’s remit.
- Oversight monitoring to ensure First Line is in line with regulatory and internal policy requirements.
- Monitor and report on KRIs aligned to Eastspring’s risk appetite
- Support on scenario analysis and thematic reviews on technology and cyber risks
- Review and challenge of TRM related Risk Control Self Assessment results, controls, issues and risk mitigation strategies and actions to ensure the risk rating, treatment plan and target completion date are able to reduce/mitigate the risk on reasonable basis.
- Review and challenge of technology related incidents root cause analysis and remediation actions defined and perform trend analysis to identify systemic issues for escalation.
- Support in the development and execution of risk assessments and thematics review
- Track and monitor technology and cyber risk exposures, supporting in the escalation of material issues on a timely basis to key stakeholders
EXPERIENCE / QUALIFICATIONS
Minimum 8-10 years of relevant experience, with compulsory experience in Technology or Risk Management/Audit.
- Candidates should demonstrate experience in identifying, managing, and reporting risks and controls in at least three or more of the following areas: IT Infrastructure Management, Application Development and Change Management, Identity and Access Management, Cybersecurity.
- Analytical, meticulous, self-starter with strong written and spoken communication skills in English a must. Ability in written and spoken Mandarin a plus.
- Ability to multi-task and handle tight deadlines.
- Proficient in Microsoft office tools.
Eastspring is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law.