AVP/SA, Security Regulatory and Compliance Lead, Information Security Services, Group Technology

DBS Bank Ltd; Singapore; Sur place; SGD 90 000 - 130 000; Plein temps

Résumé du poste

DBS Bank Ltd in Singapore seeks a Technology risk professional to act as the first line of defense for risk and control matters. You will coordinate critical risk programs, manage reviews, and drive automation and governance across technology operations.

You will collaborate with line managers, track remediation, and produce metrics to demonstrate risk posture to senior management. Strong analytical skills and effective communication are essential.

Qualifications

• At least three years' experience in technology development and support or risk management.
• Experience in technology risk lifecycle management.
• Experience managing IT audits / governance / risk programs.
• Communicating risk and control findings with stakeholders and management.
• Experience using programming skills to analyse data for risk reviews.

Responsabilités

• Act as first Line-of-Defense (LoD) and focal point for team risk and control matters.
• Coordinate and run programs to enhance the risk posture.
• Support day-to-day operations by managing approvals, risk reviews, SOP development and reporting.
• Review processes for improvements through automation and templating.
• Collaborate across units to drive risk reduction and mitigation initiatives.
• Review issues, propose action plans and verify remedial solutions for closure.
• Work with Line managers to remediate control gaps identified from root cause analysis.
• Develop framework and metrics to support risk mitigation programs and elevate issues to stakeholders.
• Manage risk reviews and assessments, control testing, analysis of key risk indicators.
• Ensure proper documentation on risk mitigation programs.
• Provide support and training to foster risk culture and awareness.

Connaissances

Risk management

Analytical thinking

Communication

Stakeholder engagement

Independent worker

Data analysis

Description du poste

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Act as first Line-of-Defense (LoD) and focal point for the team risk and control matters.
• Coordinate and run programs to enhance the risk posture throughout the Bank and department.
• Support day-to-day operations by managing approvals, risk reviews, process refinements, SOP development and reporting.
• Review exisiting processes for improvements through automation and templatizing of documents to enhance efficiency and ease of use.
• Collaborating across units to drive risk reduction and mitigation initiatives.
• Review identified issues, action plans proposed and verify remedial solutions for closure.
• Work with Line managers and oversee risk mitigation programs to remediate control gaps identified from root cause analysis and lessons learnt.
• Develop framework and metrics to support the department risk mitigation programs and elevate emerging or at-risk issues to the relevant stakeholders in a timely manner.
• Manage risk reviews and assessments, control testing, analysis of key risk indicators to review effectiveness of internal controls and to ensure risk exposure over the key processes are within risk appetite and comply to the bank's standards.
• Ensure proper documentation on risk mitigation programs from the department.
• Provide support and training to foster strong risk culture and risk awareness within the department.

Audit, Regulatory, Compliance

• Manage internal / external audits, regulatory reviews and act as audit focal point for the department;
• Coordinate, collate and review responses to regulators on notices, advisories and queries; and
• Tracking and reporting status to the team and provide management updates in management forums.

Legislation,regulationsand policies

• Assistin the Bank'scybersecurity program including cyber security policies, regulatory audits, compliance management,metrics,riskandperformance indicatorsand reporting tosenior management;
• Track andmonitornew security regulatory guidelines, and assess the compliance of and impact to the Bank's security policy architecture;and
• Work with regional information security services teams in the core markets tomonitornew cybersecurity legislation and/ or regulation, andassess the impactagainst theBank's security policy architecture.

Requirements

• At least three (3) years' experience in technology development and support environment, vendor management, technology implementation or technology risk management.
• Prior working experience / knowledge in the following areas :
  • Technology and operational risks lifecycle management
  • Managing IT Audits / Governance / Risk Management programs
  • Performing deep-dive investigation for control and process issues.
• Communicating risk and control findings with key stakeholders, developing recommendations and provide accurate metrics and management reports.
• Well versed with governance and control frameworks
• Sound understanding of technical processes, policies and risk measurements.
• Good control mindset and the ability to understand a broad range of operational and technical issues
• Strong analytical, problem-solving skills and meticulous
• Strong communication, interpersonal and written skills; able to communicate with stakeholders, higher management, technical support units and users.
• Influential in communication, able to drive towards agreed solution.
• Able to work independently with minimal supervision and with a positive attitude
• Experience in utilizing programming skills to analyse data to facilitate risk reviews and assessments.

Location:

DBS Asia Hub

Job:

Technology

Schedule:

Regular

Employee Status:

Full time