Associate Director, ICS Risk & Control, CyOPS

The role is to lead risk and control for selected service lines within Information Cyber Security (ICS) – Cyber Security Operations (CyOPS) department. This Department is composed of Security Monitoring and Analytics, Cyber Defence Center, Endpoint Response Platforms, Data Leakage Protection, Insider Threat, Fusion.
This team provides governance, oversight and assurance, as well as advocating and imparting lessons and good practice to shape the design and implementation of cyber security controls. In addition, determining whether these controls are operating effectively. Person in this role will ensure all risk activities for supported services are completed on time with good quality leading team efforts. This includes risk identification, tracking of remediation as well as risk reporting. The role requires strong stakeholder management and communication skills, self-management, feeling of ownership and responsibility for assigned tasks and ability to tackle obstacles.

Key responsibilities include:

• Oversee all risk and control activities related to all people, processes and assets within the ICS function.
• Lead a team of risk and ICS SMEs to drive complex controls transformation agenda.
• Deliver risk focused, timely and re-performable deep dive reviews.
• Design and maintain internal processes that allow ICS to dynamically monitor risk and controls including maintenance of controls and corresponding metrics.
• Provide timely and accurate risk & control MI to the respective risk forums.
• Drive compliance with the Bank’s risk framework and policies
• Support the design, build, and implementation of effective processes and controls to effectively mitigate ICS risks.
• Support stakeholders in defining remediation actions to address identified control weaknesses and issues.
• Act as the key confidant to Process Owners responsible for developing, prioritizing and implementing controls.
• Track issue remediation, check and challenge delivery status and escalate delays as well as validate that remediation activities are completed.

Strategy
• Build effective relationships with leaders to facilitate:
o Growing trust with clients and regulators by supporting the ICS Function to be ‘First to Know’ its risks & issues, and to deliver on its commitments; and
o The provision of timely, expert advice and assurance;
o Partnerships with other functions to provide professional advice and assurance;
• Work closely with the ICS key strategic initiatives to provide delivery assurance and assessments of key deliverables.