Job description

Job Description

Reporting to the Technology & Operations (T&O) Assurance Head, as the successful candidate, you will play a pivotal role in the technology quality assurance and Audit Coordination/ Management of the Bank’s Technology and Operations Group (“GTO”).

• Support the T&O Assurance Head in the formulation and management of the targeted control review work plan and program for effective internal controls and checks on the Group’s Technology and contribution to the improvement of governance and control processes.
• Plan / Lead / Carry out risk-based targeted review (including compliance review against IT policies and relevant regulations) of Technology, Security and/or application controls.
• Evaluate the adequacy and effectiveness of controls; lead the team and drive issue discussion with stakeholders, prepare review reports, identifying critical risks with appropriate recommendations under limited supervision.
• Review the adequacy of the action plans implemented to ensure satisfactory closure of action plans.
• Conduct periodic stakeholder engagement meetings throughout the reviews to maintain regular communication and drive early risk discussion with stakeholders.
• Play a lead role in the continuous improvement of assurance review approach to digital and data analytics-based model by developing use cases to enhance coverage and quality of review and improve productivity.
• You’ll be a key liaison with regulators, Internal Audit and external auditors, and manage technology audits in collaboration with Technology functional owners
• Manage the Technology Audit and Regulatory Inspection Management Process, analyse Audit Observations and/or regulatory responses and provide guidance to Technology teams on management responses and remediation.

Job Requirements

• Degree holder with additional Banking, Finance or Accounting qualifications.
• At least 10 to 15 years of relevant experience in external or internal audits or risk management functions of a financial services institution is required.
• Strong understanding of MAS Technology Risk Management Guidelines and other equivalent regulations is preferred.
• Well versed in the technical security controls for one of the following areas: web / cloud / network / system security, DLP controls, IAM, AS/400 and Unix operating systems controls, database controls.
• Experience in usage of data analytics for audit reviews and/or continuous auditing will be a strong plus.
• Familiarity with governance control frameworks (NIST, ISO, CIS, COBIT, SOC 2 etc) would be an advantage.
• Adaptability in multi-cultural settings.

The competencies you’ll need to succeed

• A leader with the ability to drive results and the passion for excellence.
• A strategic thinker who has the organizational agility to handle ambiguity and yet able to focus and set strategic direction for the team.
• With ability to look at issues from multiple angles, the candidate should be able to appreciate diverse perspectives and complexity and ambiguity in management and strategic decisions.
• Possess the mental capacity and energy to sustain through difficulties and challenges, and the courage to raise issues and manage conflicts.
• Ability to handle diverse and multiple projects concurrently.
• Self-directed, self-motivated with the ability to take ownership for business unit goals, he/she should make sound decisions in a timely manner, use good judgment and keep initiatives moving.
• Possess strong verbal and written communications skills and with effective presentation skills

Additional Requirements