Manager - Technology Risk - Bank

Manager Technology Risk

Job Purpose:

Key Responsibilities:

Strategy:

- Support the CIO in the overall effective and proactive management of technology risks and controls in accordance with the Bank's operational risk framework as well as local Technology regulatory requirements or guidelines.

- Implement an end-to-end Technology risk management strategy.

- Provide technology risk management thought leadership and influence country/region's technology risk strategy with the effective technology risk management.

Audit:

- Represent the Function as the Single Point of Contact (SPOC) on internal and external audits and Subject Matter Expert (SME) on the audit working practices.

- Ensure that the affected function (and units within) are sufficiently prepared for upcoming audits.

- Review adequacy of management response to audit findings.

- Review progress and timely closure of audit findings.

- Share thematic risk & audit findings across functions and units and best practices.

- Ensure adequate support is available for Regulatory inspections and internal/external IT audits.

- Facilitate discussions with audit or to ensure any audit observations are reflected factually and action plans are effective to address the issue and root cause.

- Validate issue closure.

- Review and perform audit ripples.

Risk Reviews:

- Scope and plan thematic risk / control reviews aligning with the function's key objectives, Group Internal Audit themes and key risk areas (may include suppliers where appropriate)

- Provide guidance to Risk Controllers on execution of risk / control reviews.

- Track material actions and risks arising from the reviews.

- Provide support and guidance on control design to Risk Controller and Process Owner. Review and provide their consensus on proposed addition of or change in controls.

- Implement Enterprise Risk Management Framework (ERMF) for Technology.

Risk Management:

- Ensure Outsourcing policy and procedures are adhered with for all India Technology outsourcing arrangements.

- Participate in Service Review Meetings of outsourcing service providers and ensure that risk issues are evaluated / followed up / resolved.

- Raise awareness of operational and technology risks among India Technology team members.

- Act quickly and decisively when any risk and control weakness become apparent and ensure they are addressed within an appropriate timeframe and escalated through the relevant committees.

- SPOC for the function on any Risk, Control or Audit initiatives.