Job Description
To strengthen the Bank's technology and cybersecurity control environment by monitoring key controls, driving continuous controls testing, and providing risk insights through data analytics and automation. The role supports the First Line in identifying and addressing technology and cyber risks, whilst ensuring controls remain effective and emerging risks are detected and remediated promptly.
Qualifications
Type of Qualification: First Degree
Field of Study: Computer science, Information Technology, Data Science, Risk Management, Finance, Business Commerce or related field
Certifications such as CISM, CRISC, CISA or CISSP are highly desirable.
Experience Required
8-10 years
Relevant experience in technology risk management, cybersecurity, or internal controls within the financial services / banking industry.
Demonstrated experience in data analytics, automation, scripting (Python, SQL, R) and visualization tools (Power BI, Tableau) with the ability to develop scalable continuous monitoring solutions.
Experience building and managing a Continuous auditing and Data Analytics program, including automating common analyses, creating visualizations and recurring audit check procedures. Extracting data from data warehouses and databases (example: SQL DB's).
Proven track record of successfully leading and managing a team of professionals.
In-depth knowledge of technology and cybersecurity frameworks, standards, and best practices (e.g. ISO, COBIT), IT governance and project management.
Familiarity with relevant banking regulations and compliance requirements.
Understanding of IT general controls and a deep understanding of technology risks.
Possess relevant technology skills including data analytics or information systems auditing skills.
Proficiency in use of data analytics tools with demonstrable scripting, visualization analytics skills.
Strong analytical and problem-solving skills, with the ability to assess complex risk scenarios and propose effective solutions.
Excellent communication and presentation abilities, both written and verbal, to convey complex technical concepts to non-technical stakeholders
Additional Information
Behavioural Competencies:
Developing Expertise
Directing People
Documenting Facts
Embracing Change
Examining Information
Exploring Possibilities
Following Procedures
Providing Insights
Team Working
Technical Competencies:
Evaluation of Internal Controls
Process Governance
Promote Good Governance, Risk & Control
Quality Control
Risk Identification & Management
Risk Response Strategy
Business Acumen