Senior Analyst, Digital

**Job Description**:
**Primary Objective**

Common to all Senior Analyst
- Ensure IT is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence). - Application and Platforms.
- Ensure IT assets are protected and secure - Applications and Platforms.
- Assist in annual budgeting - Applications and Platforms.
- Be a key stakeholder and technology partner on the bank Digital journey.
- Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached.
- Where vendor based solution approach adopted and/or outsourced approach, arrange due diligence and assessment from technology perspective on behalf of users.

Specific to Digital and Payments
- Digital and Payments: Digital, Payments and Channel systems such as Mobile Banking (MBK), SOA / API and Messaging platforms, UAS/E2EE/MFA customer token platform, Digital onboarding, ATMs, SWIFT/MEPS+, G3 Fast and Bulk Payments, Cheque processing system, Enterprise workflow system, document share system, RPA.

**Key Responsibilities**

Strategy, Planning, Management. Reporting
- Provide expert advice and support to technology management in the area of expertise.
- Contribute in the formulation a comprehensive Branch IT strategy covering IT policies and procedures, security, architecture, business solutions and operational functional requirements.
- Keep abreast of developments and innovations in the FI IT landscape.
- Provide mentorship, support and guidance to colleagues, share information and facilitate problem solving.
- Contribute in the yearly budgeting for IT expenditures and investments.

IT Operations
- Ensure prompt and efficient provision of IT support based on assigned area of expertise (includes request from Data center operations team).
- Oversee contingency plans and ensure their adequacy - Ensure IT assets are protected and secure.
- Maintain and ensure timely renewal of digital certificates and proper lodgment with IT security team.
- Ensure IT operations run in a manner consistent with high score from audit, risk, compliance assessments. The following to be operationalized as standard procedure against all IT asset components:

- Administrative Accounts - All admin accounts lodged into PAM solution per group IT Security guidelines and MAS notice 655 point 4.1
- Patching - Patch notification process established with vendors and patch calendar updated, upon patch release assessment and implementation as needed Per patching guidelines and MAS notice 655 point 4.2
- Hardening - Per component definition and enforcement against SG security standard and Group IT Security guidelines and SG addendum/s and MAS notice 655 point 4.3
- Network Perimeter Defense - Network traffic and segments, firewalls, proxies, dns, vpn access setup in secure manner per group IT security guidelines and MAS notice 655 4.4
- Malware - IT Security consulted and all required IT security protections installed on IT assets per MAS notice 655 point 4.5
- Multi-factor Authentication - MFA, where applicable implement MFA of administrative and internet accounts with access to customer information using PAM per MAS notice 655 point 4.6
- Logging and Monitoring - Security, Capacity, Downtime, Audit
- Capacity Mgmt. - Pre-emptive monitoring (via monitoring), planning and execution of capacity upgrades as needed
- EOL/EOS Upgrades - Per group guidelines. Track and execute upgrades and/or do risk assessment and deviation approval.
- Housekeeping - scripted clean-ups and truncations of logs and temp files after necessary archives executed
- Backups - Required backup strategy per backup guidelines operationalized to central Backup Platform. Recurring scheduled backup validation activities scheduled and performed ongoing to ensure backups working per need.
- Work with system stakeholders to ensure proper classification of system criticality and ensure design and architecture can meet the assessed criticality needs:

- MAS 644 defined Critical system - Ensure DR setup and working and can achieve RTO within 4 hours, RPO within 2 hours and maximum unplanned downtime of not more than 4 hours per rolling 12 months;
- MAS 644 defined non-critical system - Ensure HA/DR per stakeholder requirement.
- BCM related activity planning and execution.
- Review and Approve/Reject production change requests as part of TCAB committee.
- Raise CAB CR as necessary.
- Cutover related planning and execution.
- Ensure and maintain adequate test environments in good working order to support enhancements and new projects.
- Adhere to SDLC for both in-house and 3rd party solution platforms.
- Take BAU day 2 operational ownership in terms of maintenance, support and minor enhancement ownership of new systems and/or major enhancements