Enterprise Risk Management VP-Cyber Security

工作职责
1. Support the WSB and MSS business with their Non-Financial Risk management and acts as a key contact and escalation for senior stakeholder engagement.
2. Work closely with the Business to facilitate business growth by providing independent review and challenge, highlighting material risk considerations and necessary mitigations required.
3. Provide 2nd line risk stewardship and guidance on WSB and MSS business activities which includes collaborating with the Resilience Risk Specialists to offer guidance on managing the most material risks, and to ensure business resilience to potential disruptions, such as technology failures, cyber security attacks, data breaches, or third-party service provider issues.
4. Support Asia-Pacific 2nd line risk stewards, as subject matter expert for technology and cyber security risk, and provide risk and control advisory on material events, risk issues and business change initiatives.
Ensure the integrity and timely completeness of risk and control identification, assessment and information within the Group’s Risk and Control system of record (Helios) as well as directing documented remediation plans for residual risks.
5. Support with thematic reviews across the WSB and MSS business to ensure that risk and control environment is commensurate with the scale and nature of operations.
6. Support the implementation and embedding of the ERM functional strategy and support the oversight on compliance to the ERM framework. Applies risk stewardship review and challenge over Resilience Risk RCAs and control environment.
工作要求
1. Strong level of Banking including transaction banking, and or Markets and Securities Services business knowledge.
2. Minimum 8 years of experience in a relevant role in Operational Risk, Business Risk and Control, with a focus on Technology, Cyber Security and Data Risk or others, preferably from a financial services organization background.
3. Strong understanding of risk management by incorporating risk considerations in business activities.
4. Business orientated, honed analytical skills, with a strong emphasis on complex analyses of data and management information.
5. A BA or BS University Degree, Technology including Cyber and Data Risk discipline preferable.