Technology Risk Management Manager (Quản lý Quản trị rủi ro Công nghệ thông tin)
Core
Provide assurance and oversight on information and technology risks to ensure they align with the Board's risk appetite and mitigate threats to business operations.
Role type
Technology Risk Management Manager
Builds
Independent risk assessments, control testing reports, and compliance frameworks for Local Business Units.
Domain
Insurance / Information Technology Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT risk assessment, control testing, RCSA review, incident management oversight, regulatory compliance, data protection standards, DLP rule review, cloud risk assessment, privacy impact analysis, stakeholder reporting
Preferred skills
Digitalization project risk identification, training and coaching, deep-dive documentation reviews
Technologies
Cloud Storage, SFTP, RMD, DLP, Cloud Risk Assessment tools
Responsibilities
Monitor and review IT security and data protection standards; Perform oversight of IT incidents including security and privacy incidents; Review effectiveness of Risk and Control Self-Assessment (RCSA); Prepare and submit Technology Risk updates to risk committees; Conduct pre-audit reviews of control effectiveness; Review access controls and business justifications for cloud storage and SFTP; Support SME identification of technology risks in digitalization projects.
