Senior Executive - IT Audit & Governance

OVERVIEW

• Cultivate risk culture within the Group including Subsidiaries.
• Develop and embed effective IT risk management frameworks, policies, methodology and procedures to ensure that the Group operational risk financial, operational and compliance are met.
• Monitors the implementation of IT risk management frameworks and policies. Escalate any gaps and action plans to senior management, Board Risk Committee and the Board of Directors.
• Perform review on Line of Businesses (LOBs) and Subsidiaries Level 3 policy and any deviation request.
• Develop, enhance, implement and maintain IT governance and policies to ensure which include framework, roadmap and processes.
• Ensure that IT governance and policies are updated frequently by performing research, recommendation, manage and participate in implanting any required IT standard and controls or policies and procedures.
• Conduct annual review for IT governance and policies and obtain annual endorsement.
• Identify and manage gaps of governance effectiveness for IT controls, IT Projects and to identify opportunities for improvement.
• Continually seek and identify opportunities for business solutions and client satisfaction.
• Participate in project related activities to address IT standards and compliance adherence, project issues and risk management guidelines.
• Act as focal point to address enquiries pertaining to IT standard and compliance matters.
• Plan and conduct required governance training to all department where necessary.
• Develop, maintain, improve and implement improve and implement both support and project templates and standards to adopted by IT.
• Maintain and conduct awareness of new and emerging technologies and potential application on client and supplier engagements.
• Conduct annual training to create awareness of new and changed policies.

REQUIREMENTS

• Bachelor Degree in Computer Science, Information Technology, Computer Engineering or its equivalent in related IT field.
• Minimum 5 years of working experience in the related field is required.
• Advanced business and IT processes, IT risk management, information security, and privacy experience required
• Financial services industry experience is required. International business exposure is a plus.
• Detailed knowledge of industry regulatory environment (e.g., FINRA 3013, FINRA 342, SEC 17a-3, etc.) and applicable information protection related legislation (e.g. GLBA, SOXA 404, SB 1386, Basel, etc.) Necessary.
• Broad understanding of audit, control and security standards (e.g., AICPA, ISACA / COBIT, PCI, etc.) required.
• Solid grasp of concepts on a wide array of technology platforms, controls (ex: ITIL) and IT processes (ex: SDLC).

OVERVIEW

• Cultivate risk culture within the Group including Subsidiaries.
• Develop and embed effective IT risk management frameworks, policies, methodology and procedures to ensure that the Group operational risk financial, operational and compliance are met.
• Monitors the implementation of IT risk management frameworks and policies. Escalate any gaps and action plans to senior management, Board Risk Committee and the Board of Directors.
• Perform review on Line of Businesses (LOBs) and Subsidiaries Level 3 policy and any deviation request.
• Develop, enhance, implement and maintain IT governance and policies to ensure which include framework, roadmap and processes.
• Ensure that IT governance and policies are updated frequently by performing research, recommendation, manage and participate in implanting any required IT standard and controls or policies and procedures.
• Conduct annual review for IT governance and policies and obtain annual endorsement.
• Identify and manage gaps of governance effectiveness for IT controls, IT Projects and to identify opportunities for improvement.
• Continually seek and identify opportunities for business solutions and client satisfaction.
• Participate in project related activities to address IT standards and compliance adherence, project issues and risk management guidelines.
• Act as focal point to address enquiries pertaining to IT standard and compliance matters.
• Plan and conduct required governance training to all department where necessary.
• Develop, maintain, improve and implement improve and implement both support and project templates and standards to adopted by IT.
• Maintain and conduct awareness of new and emerging technologies and potential application on client and supplier engagements.
• Conduct annual training to create awareness of new and changed policies.

REQUIREMENTS

• Bachelor Degree in Computer Science, Information Technology, Computer Engineering or its equivalent in related IT field.
• Minimum 5 years of working experience in the related field is required.
• Advanced business and IT processes, IT risk management, information security, and privacy experience required
• Financial services industry experience is required. International business exposure is a plus.
• Detailed knowledge of industry regulatory environment (e.g., FINRA 3013, FINRA 342, SEC 17a-3, etc.) and applicable information protection related legislation (e.g. GLBA, SOXA 404, SB 1386, Basel, etc.) Necessary.
• Broad understanding of audit, control and security standards (e.g., AICPA, ISACA / COBIT, PCI, etc.) required.
• Solid grasp of concepts on a wide array of technology platforms, controls (ex: ITIL) and IT processes (ex: SDLC).