Senior Manager - Technology Risk

The Role:
We are recruiting a Senior Manager - Technology Risk to assist business units and cross-functional teams in identifying and mitigating information security risks.

 
Skills and Experience:
Essential Qualifications:
Degree in related technology field (Computer, Engineering, Science, etc.) or similar
COBIT 5 certified (Foundation and Assessor)
ITIL (Foundation) certification
Preferred Qualifications:
Relevant Diploma/Degree in Information Technology, Computer Science and/or IT Risk Management.
Certification in any of the following will be an advantage: CRISC, CISA, CISSP, CISM, CIA, PECB (ISO)
Profound knowledge of technology risk and compliance across on-premises, cloud, and hybrid architecture.
Experience required:
Function related experience:  (10 years in Operational/IT Service Management
Leading teams:  5-10 years
10 years in cybersecurity, technology risk, risk management, system development management or IT audit function, gained from other sizable IT related institutions.
A demonstrable experience in IT Risk Management and associated ERM disciplines.
Experience with industry frameworks such as COBIT, ISO27001, NIST and other including a solid understanding of the 3 lines of defence model.          
Key Accountabilities:
Work as second line, defining to ensure the compliance of technology risk and cybersecurity, including: 

Duties/Responsibilities: 
To assist business units and cross-functional teams in identifying and mitigating information security risks.
Work as second line of defines to ensure the compliance of technology risk and cybersecurity, including:
Support in developing and enhancing technology risk and cybersecurity management framework.
Formulate and manage information security policies, standards, and procedures.
Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and endpoint security review.
Support the implementation of security initiatives to ensure the compliance with corporate information security policies and compliance standards.
Establish and enforces standard of process related to Technology Risk Management.
Continuously exploring the technology risk and cybersecurity regulation regionally to ensure the compliance with the technology risk and cybersecurity regulation regionally
Work as part of the Head Office GRC team