Assistant Vice President / Vice President, IT Risk Management
Core
Second line of defence (2LoD) providing oversight and challenge of technology risk management, cybersecurity risk management, and control effectiveness of the first line of defence (1LoD) in a banking environment.
Role type
Senior IC IT Risk Management / Cybersecurity Risk Management
Builds
Technology risk management framework, control assurance strategy, and risk monitoring reports
Domain
Banking / Financial Services / IT Risk & Cybersecurity
Required skills
Technology risk management, Cybersecurity risk management, Operational risk management, Control testing, Risk assessment, Regulatory compliance, Audit execution, Root cause analysis, Risk appetite definition, KPI monitoring
Preferred skills
Internal audit experience, New product proposal review, Committee participation, Risk culture program development
Technologies
ISO27001, NIST 800, PCI-DSS, C-RAF, iCAST, TM-E-1, TMG-1
Responsibilities
Design and maintain technology risk management framework incorporating industry standards; Review adequacy of implemented controls and challenge 1LoD risk assessments; Conduct assurance reviews on banking operations and IT risks including control testing; Investigate operational risk incidents to identify root causes and evaluate corrective actions; Submit regular MIS on control assurance issues to senior management; Prepare bank-wide awareness programs for technology and cybersecurity risk cultures.
Seniority
Senior, hands-on IC