This service is set to disconnect automatically after {0} minutes of inactivity. Your session will end in {1} minutes. Click OK to reset the timer to {0} minutes.
You have been signed out. This service is set to sign out after {0} minutes of inactivity.
Job Description - Group Operations & Technology, Risk & Prevention, Technology Risk Manager (VP) (250000MD)
Description of Group Operations & Technology, Risk & Prevention
Group Operations and Technology (O&T) provides IT and back-office support across OCBC’s business lines such as Group Consumer Financial Services, Group Corporate Banking, Global Treasury, Group Risk Management, Group Finance, and Group Human Resources. Additionally, Group O&T manages the bank’s regional processing centres and technology operations, driving productivity gains and reducing unit costs by fostering a quality culture, and leveraging synergies from cross border processing hubs in Singapore, Malaysia and across the wider region.
Group O&T Risk & Prevention (R&P) mandate is to foster a risk aware culture that enables effective technology risk management across Group O&T with the following key responsibilities:
- Ensure compliance of processes with the bank’s IT standards, policies, and regulatory requirements.
- Collaborate with stakeholders to perform comprehensive risk and control assessments of processes, applications, and infrastructure (including operating systems, middleware, databases, and networks).
- Collaborate with Group O&T teams to assess technology risk posture, identify areas of improvement, and discuss controls or risk mitigation solutions while building strong, respectful relationships with stakeholders.
- Support stakeholders in audits and regulatory related reviews and inspections, ensuring that tracking, reporting, and root cause analyses are effectively addressed.
- Promote risk awareness and aptitude among Group O&T staff and educate them on methodologies and processes for risk management and compliance.
Role Description
As a Technology Risk Manager, you will be responsible for identifying, assessing, and mitigating technology-related risks effectively. This role requires close collaboration with technology teams to address technology risk challenges and strengthen the risk culture within Group O&T.
Duties and Responsibilities
- Support Head of Risk & Prevention in the overall effective and proactive management of technology risk and controls in Group O&T.
- Utilise data analytics, automation, and visualisations to enhance technology key risk reporting and monitoring.
- Demonstrate familiarity with data storytelling and presentation techniques to convey technology risk insights to GO&T management.
- Identify and implement technology capabilities that facilitate continuous auditing of GO&T controls to further uplift technology posture.
- Analyse trends and technology risk hotspots using IT incidents, key risk indicators, audit findings, and operational risk events, and identify follow up actions.
- Challenge, drive and discuss controls or risk mitigating actions, whilst building strong, respectful relationships.
- Support stakeholders in audits and regulatory related reviews and inspections, ensuring that tracking, reporting, and root cause analyses are effectively addressed.
Qualifications
- Experience in developing and implementing dashboards/ data visualisation, heatmap presentation of metrics.
- Hands-on experience in the following software:
- Data analytics software such as KNIME
Experience working with Relational Databases, Data Lakes, Datamarts etc.Experience with performing IT risk and control assessments and managing audits (internal and external) as well as regulatory inspections.Good understanding of regulatory requirements, such as MAS Technology Risk Management, Outsourcing and Notices FSM-N05, FSM-N06, etc.Degree in Technology with at least 10 years of experience in information technology risk management, security, audit, and/or risk analytics. Practitioner and holder of IT certifications, such as CISSP, CISA, or CRISC would be advantageous.
Core Competencies
- Candidate should have a strong background in technology risk management, complemented by hands-on experience in technology domains or audit/compliance.
- Ability to adapt and work effectively in a dynamic, fast-paced environment is essential.
- Candidate should be self-motivated individuals with initiative and a results-oriented mindset. Strong analytical skills, attention to detail, and excellent communication and collaboration abilities are essential. They should also be forward-thinking and stay updated on developments in risk management, analytics, and automation.