Senior Manager, IT GRC - Information Security (R-0023235)

• Contribute and support the Head of Technology Assurance & Information Security Governance in defining, developing and maintaining technology assurance framework in all FWD markets in accordance with the Group Technology Roadmap.

• Work closely with senior management of business units and within Group Technology through tracking and reporting function, to ensure regular updates to management on the Technology Assurance programs.

• Be accountable for the planning, management and execution of the day-to-day activities of Technology related audit engagements.

• Ensure system and control owners are identified; and coordinate with owners to support technology assurance and assessment activities.

• Collaborate with key technology, business, risk, audit and compliance teams to identify, evaluate and address critical technology related risks.

• Proactively research industry trends and define, influence and implement appropriate and practical technology related KRIs, metrics and solutions to create and enhance process efficiency and address key risks. 

• Define, oversee and ensure all test scenarios for effectiveness of the internal controls and provide guidance to remediate the deficiencies/ weaknesses.

• Ensure FWD readiness for IT Security Internal/External audits.

• Advise BUs on Technology risk assessment.

QUALIFICATIONS / EXPERIENCE

• Minimum 6-8 years of experience in IT Audit and Risk Assessment in insurance, banking or financial industry

• Degree from Information Technology or equivalent discipline

• One of industry recognized certification such as CGEIT, CISSP, CISM, CISA, ISO 27001, CRISC, PCI DSS etc.

KNOWLEDGE & TECHNICAL SKILLS

• Excellent stakeholder management and communication skills.

• Project delivering experience

• Solid understanding of current and emerging technologies.

• Understanding of IT SOX and other IT/IS frameworks and best practices such as COSO, COBIT, ITIL, ISO 27001, SOC 2, 3, etc.

• Good knowledge of privacy regulations and data protection.

• Detailed oriented and able to work under pressure and accustomed to work under tight deadlines.

• Team-oriented, collaborative, diplomatic and flexible.

• Strong written and verbal communication skills, strong interpersonal skills and the ability to communicate effectively across business units.