Senior Manager - IT Risk Management

D360 Bank

Sets governance procedures for documenting and updating technology and cybersecurity policies, standards, guidelines, and procedures
Documents and implements procedures for technology and cybersecurity breach incidents and post-breach activities
Facilitates Technology and Information Security staff s operational implementation of technology and cybersecurity risk frameworks
Recommends strategies to address risk areas based on assessments of business needs against security concerns and regulatory requirements
Leads the conduct of risk and control assessments, system assessments, and stress testing to identify risk profiles
Reviews organizational assessments and augments security controls with 3rd party and internal Technology and Information Security staff
Analyses technology and information security risk metrics to address emerging risks
Implements routine technology and information security risk monitoring activities
Assesses risks in new technology / digital initiatives and function/business technology usage
Provides strategic and technical recommendations following the identification of vulnerabilities within IT systems
Review existing risk monitoring mechanisms to reflect changing trends, regulations, and industry best practices
Enforce, incorporate, and comply with all necessary controls and related information security (EIS) policies, procedures, practices, training, reporting, personal due diligence and vigilance, within departmental/unit activities and operations.