Technology Risk Head

Cobden & Carter International; Philippines; Hybrid; PHP 1,200,000 - 1,500,000; Full time

Job summary

A reputable digital banking firm in the Philippines seeks a Technology Risk Manager to oversee technology risk management activities. The ideal candidate has over 8 years of experience in IT security and risk management, and strong communication skills. This hybrid role involves establishing compliance, conducting risk assessments, and coordinating between departments, offering a dynamic work environment.

Qualifications

• Over 8 years of experience in IT security, Technology Risk, Risk Management, Compliance, or IT Audit.
• Experience with IT Audit and regulatory requirement compliance.
• Certifications like CISSP, CISM, ITIL, or CISA are a plus.
• Strong written and spoken English skills.
• Experience in analyzing and mitigating security-related issues.
• Excellent analytical and problem-solving skills.

Responsibilities

• Establish and maintain technology risk management rules and guidelines.
• Ensure employee compliance with technology risk management policies.
• Collect and analyze IT supervisory information from regulators.
• Perform reporting and approval procedures for IT supervisory matters.
• Conduct regular technology risk assessments.
• Coordinate with departments for technology risk management.

Skills

IT security expertise

Risk assessment capabilities

Strong communication skills

Analytical skills

Job description

Our client is one of the leading, trusted, and innovative Digital Banks in the country.

The Role:

Assumes the direct accountability of the technology risk management activities and ensures to satisfy the technology risk management provisions of the Bank and local regulators.

Responsibilities:

• Establish and maintain local technology risk and information security-related implementation rules, procedures, guidelines, and local regulatory requirements. (IT Governance, information asset management, use of cryptography, security management, physical and personnel security, system development and change management, information processing, communication networks, management of service providers, cyber security controls, and others)
• Ensure all employees are aware of and comply with various technology risk management and information security policies, administrative measures, and relevant standards, guidelines, and rules.
• Regularly collect and analyze IT-related supervisory information from local regulatory authorities and relay this information to the Branch.
• Pursuant to local regulatory requirements, perform the reporting, filing, and approval procedure for all material IT-related supervisory matters.
• Establish and maintain respective TRM implementation guidelines based on the management requirements.
• Carry out regular technology risk assessment, and perform technology risk identification, assessment, monitoring, control, and reporting of its own and its service providers.
• Take the lead in coordinating with all departments and units of the bank to ensure the implementation of the first line of defense of technology risk management.

Qualifications:

• Over 8+years of experience in IT security, Technology Risk, Risk Management, Compliance, or IT Audit function, gained from other sizable financial or Banking institutions
• Solid experience with IT Audit and regulatory requirement compliance
• One or more of the following certifications is a PLUS: Certified information systems security professional (CISSP), Certified Information Security Manager (CISM) Information Technology Infrastructure Library (ITIL), and/or Certified Information Systems Auditor (CISA).
• Strong communication skills, good in both written and spoken English.
• Experience in analyzing and mitigating security-related issues and threats.
• Excellent analytical and problem-solving skills in order to identify and respond to unexpected or disruptive events.
• Familiarity with ITILv3 or ITIL v4.

Work Setup:

Shift: Day Shift

Setup: Hybrid

By Applying, you give consent to collect, store, and/or process personal and/or sensitive information for the purpose of recruitment and employment may it be internal to Cobden & Carter International and/or to its clients.