Expert, Technology and Digital Risk Management

Job Purpose

1. Manage and monitor TDRM to ensure technology and digital risks are managed and mitigated within risk limit

2. Develop, propose and implement TDRM programs and activities to manage technology and digital risks

3. Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies, risk taxonomies and respective mitigation controls

4. Provide subject matter advices related to Technology và Digital innovation and implementation

5. Develop TDRM capabilities and improve bankwide TDRM awareness and culture

Key Accountabilities

1. Manage and monitor TDRM

- Develop, propose and implement TDRM programs and activities to manage technology and digital risks

- Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies

- Develop technology and digital risk taxonomies and respective mitigation controls

- identify data collection requirements for TDRM data, develop TDRM data structure, model, dashboard and KRI to monitor technology and digital risks and forecast risk trends; and propose early actions to ensure technology and digital risks are managed and mitigated within acceptable level

2. Provide subject matter advices related to Technology và Digital innovation and implementation

- Evaluate technology strategy, business process, control automation and governance and compliance

- Evaluate the effectiveness of controls and oversee and oversight the design and implementation of controls.

- Support in investigation of cyber digital risk incidents and recommend solution/action to mitigate and manage risks

Success Profile - Qualification and Experiences

Experience:

- At least 06 years of relevant work experience and at least 02 years of people management experience

Expertise:

- Extensive knowledge of technology and digital risks, information systems, information security, information system review

- Extensive knowledge of banking information system landscape and banking business operation

- Understanding the TCB information systems and business operation

Qualifications:

- Having a university degree or higher on Information Technology, Information System, Information Security or equivalent

- English: TOEIC 550 or equivalent

- Having professional certification on IT risk, information security, Information system review