IT Audit, Risk and Security Management recruitment

Main responsibilities:

1. IT Audit Management

• Facilitate the Internal/External IT audit processes

• Ensure accurate tracking of issues to facilitate timely closure

• Ensure timely escalation of potential audit issues for prompt risk mitigation handling

• Co-ordinate, develop and execute of Risk Control activities like Risk and Control Self-Assessment (RCSA), Regulatory Requirement Self-Assessment (RRSA)

• Assess the effectiveness of controls and determine the potential impact of any control failures and corrective actions required

2. IT Governance and Compliance Management

• Good appreciation of IT policy, standards and guideline for adequate enforcement of compliance

• Ensure and enforce good IT governance in compliance to internal IT and Security standards

3. IT Service Continuity Management

• Co-ordinate the planning, design, testing and maintenance of IT business continuity/disaster recovery plan and other supporting documents

• Identify key business processes and assess risks to availability, integrity and confidentiality of these processes

Requirements:

• Interested candidate must possess the ability to work independently and professionally

• A strong team player who takes ownership of issues and problems for close follow up in the respective areas

• Proficient communication skills (spoken and written) in direct customer facing with users at different levels.

• Willingness to take on new challenges and explore to improve current exposure

• Broad based knowledge of IT Risk, Security and Disaster Recovery/Business Continuity

• Demonstrated experience with direct participation in facilitating audit and/or service continuity activities across multiple sites/business entities

• Familiar with IT related regulatory requirements, minimally IBTRM and TMG

• Ability to demonstrate a good understanding of IT Service Management processes e.g. ITIL v3

Qualifications:

• Minimum Diploma or Bachelor Degree in the relevant fields

• Minimum 6 years relevant working experience with at least 4 years of experience in IT audit, technology risk and security and/or service continuity functions

• Working experience in the banking or financial industry is a must

• Professional certifications like CISA, CRISC, CBCP would be advantageous