Technology Governance Analyst

IT Risk Management

· Conduct risk assessments and propose/ implement risk management plans.

· Ensure visibility, escalation, and management of IT risks inherent in the delivery of technology services and day to day operations

· Review risk issues that are lodged in GRC tool timely and lapses are managed and risk assessed

· Collaborate with the Second Line of Defense (Tech Risk) to conduct periodic control self-assessment exercises.

· Identify emerging risks, conduct thorough risk assessments, and implement effective mitigation strategies.

Compliance and Audit

· Ensure compliance with IT policies and standards and regulations

· Coordinate IT audits and manage responses to audit findings

Collaboration and Communication:

· Facilitate IT Risk governance training and awareness programs for employees

· Promote a strong IT risk culture across the Technology division

Performance Monitoring and Reporting:

• Monitor key performance indicators and key risk indicators
• Report on IT governance performance to stakeholders in Risk Committees
• Highlighting and articulating inherent risks to senior management

Experiences

· Diploma or Degree in Computer Science or Information Technology.

· 5 years of experience in Technology Risk i.e. monitoring of IT Operations, Security, Risk and Compliance or audit.

· Familiar with MAS regulatory requirements including Technology related MAS notices, guidelines, advisories, PDPA

· Industry certifications like CISA, CISM, CISSP, CRISC and ITIL will be beneficial