Vp, Technology Risk Manager, Easre, Group Technology

Business Function
Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
Job Summary
- Technology is key to enabling the DBS vision of being the leading bank in Asia.
- To meet the challenges arising from the ever evolving technological advancements and increasing sophistication and demands of customers, there is a need for deft Technology Risk Managers to ensure robust risk governance.
- As a member of the Level1 Technology Risk Management team, you will be responsible for driving IT risk management initiatives including risk governance, regulatory inspections, internal & external audits and thematic reviews across the functions.

**Responsibilities**:

- Audit
- Accountable for managing internal, external and regulatory reviews/audits from audit planning, fieldwork (such as request for information (RFI), issue discussion, etc.), to reporting and closing meeting.?
- Assess regulatory changes (such as MAS, HKMA, CBIRC, OJK, RBI and FSC) impacting the technology platforms & drive risk mitigation programs with stakeholders.?
- Review risk findings with stakeholders to determine management actions and responsible for monitoring and validating the closure of management actions.
- Present risk observations and management actions at departmental meetings.
- Risk Control
- Engage and collaborate with technology stakeholders to proactively identify risks at a detailed technical level and drive remediation plans to ensure that risks identified are effectively mitigated.
- Manage the risk and security related process improvements and quality programs by participating in research/advisory services, including capturing of relevant metrics and analysis.
- Perform data analysis or procedure reviews to ensure compliance to bank security standards; Provide technical expertise/consultation for process improvement and quality assurance.
- Provide timely and periodic update to management on risk and security matters.
- Communicate and provide guidance of new risk policies and standards.

**Requirements**:

- Degree in Computer Science, Engineering, Information Technology or related discipline from a recognized University with minimum 8-15 years of working experience in the Financial / Banking IT industry.
- Demonstrated experience in identifying, assessing and advising on technology risks.
- Excellent organizational, problem solving, interpersonal and operating skills to effectively drive the IT Risk agenda with IT functions.
- Have a strong control and process management mindset, constantly paying attention to details and have ability to perform deep-dive investigation and crunching for control and process issues.
- Strong communication skills - able to effectively communicate with IT senior management, as well as line staff
- Knowledge of Information Security, System Resiliency & Availability, Software Development Life Cycle (SDLC), & Continuous Integration Continuous Deployment (CICD) practices and frameworks preferred.
- Knowledge of the Banking Act - Banking Secrecy, Bank's policy and guidelines, Information Security Policy, Anti-Money Laundering, Cyber Security Act, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines etc.
- Professional Certification preferred - CISA/CISM/CISSP/CRISC/CGEIT.

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognizes your achievements.