Manager - Regulatory Reporting & Info Security.Regulatory Reporting(Credit).International Banking Group

About the Role / About the Job
This position is responsible for managing and providing independent oversight of Risk Management, Regulatory Reporting, and Information Security activities. The role ensures effective governance, timely regulatory compliance, proactive identification and management of risks, robust security controls, and appropriate management reporting and escalation. The individual will manage all country Risk and Information Security-related routine and ad hoc reporting to the Qatar Central Bank and Qatar Credit Bureau, collaborating with in-country stakeholders and Head Office functions to ensure timely and accurate reporting. This role also contributes to maximizing business profitability by ensuring detailed credit analysis of various products in the Corporate and Investment Banking Group (CIBG).

Responsibilities

1. Risk Management & Regulatory Reporting

• Manage and oversee the timely preparation, review, and submission of all regulatory reports, including Central Bank, Credit Bureau, and other applicable regulatory submissions, ensuring accuracy, completeness, and compliance with regulatory requirements.
• Ensure compliance with applicable Risk Management regulations, guidelines, policies, and reporting requirements, and coordinate implementation of new or revised regulatory requirements with relevant stakeholders.
• Ensure regulatory and risk reports are appropriately reconciled with the relevant source systems, with discrepancies identified, investigated, escalated, and remediated on a timely basis.
• Provide oversight of Credit Bureau disputes and customer complaints relating to reporting deficiencies, ensuring appropriate investigation, resolution, and implementation of corrective measures to prevent recurrence.
• Coordinate with business units and relevant functions across the Bank to improve the accuracy, completeness, and integrity of customer and portfolio data used for regulatory and management reporting.
• Develop and enhance Management Information (MI), Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), dashboards, and portfolio reporting, including regular and ad hoc analysis, to provide management with timely visibility of risk exposures, trends, exceptions, and emerging concerns.
• Perform ongoing review and analysis of the Bank's asset portfolio through effective Management Information Systems (MIS), identifying material trends, concentrations, exceptions, and areas requiring management attention.
• Ensure Management Exception Reports (MER) and other applicable risk exceptions are accurately recorded, monitored, and reported within established timelines, with appropriate follow-up and escalation.
• Manage and monitor regulatory, risk, audit, and assurance findings and commitments, ensuring clear ownership, appropriate remediation plans, adequate supporting evidence, and timely closure.
• Provide independent review and challenge of risk assessments, control gaps, exceptions, and remediation plans, escalating material or overdue exposures to senior management where required.
• Work closely with Technology and other stakeholders to enhance data and reporting capabilities, improve data quality, enable effective multidimensional analysis, address system-related issues, and streamline regulatory and management reporting.
• Drive system and process improvements to enhance efficiency, automation, accuracy, and control within Risk Management and regulatory reporting activities, including initiating and coordinating required system enhancements.
• Develop, review, and maintain relevant Standard Operating Procedures (SOPs), processes, and controls, ensuring alignment with regulatory, policy, and operational requirements.
• Oversee implementation and monitoring of approved Risk Management action plans, controls, initiatives, and remedial measures, ensuring appropriate governance and timely escalation of delays.
• Prepare and present Risk Management and regulatory reporting updates to senior management and relevant governance forums, highlighting significant risks, regulatory matters, trends, exceptions, and required management decisions.
• Drive continuous improvement in Risk Management governance and regulatory reporting, strengthening data quality, control effectiveness, accountability, and overall reporting efficiency.

2. Information Security Management

• Manage and oversee the execution of the Information Security Group (ISG) operating model at the country level, ensuring alignment with Group Information Security requirements, local regulatory requirements, and internal policies and standards.
• Provide country-level governance and oversight of Information Security risks and controls, ensuring significant security risks, control gaps, exceptions, and non-compliance are appropriately assessed, documented, remediated, and escalated.
• Review Information Security-related changes and provide appropriate risk review, challenge, and approval/rejection in accordance with applicable Information Security standards and governance requirements.
• Assess the adequacy and effectiveness of Information Security controls in meeting applicable regulatory, policy, and Risk Management requirements, and monitor remediation of identified control deficiencies.
• Provide oversight of cyber and technology risk assessments relating to systems, applications, infrastructure, projects, new technology initiatives, and material technology changes.
• Oversee vulnerability assessments, security assessments, and related remediation activities, ensuring significant vulnerabilities and control deficiencies are appropriately prioritized, assigned, monitored, and tracked to closure.
• Provide Information Security risk oversight of third parties, outsourced services, and cloud solutions, including security due diligence, risk assessments, control reviews, and monitoring of identified remediation actions.
• Collaborate with the ISG, Technology, Procurement, Finance, Administration, and other relevant stakeholders to assess security and technology compliance and coordinate regulatory requirements, including preparation and submission of the Annual Technology Register to the Qatar Central Bank.
• Support the CISO in developing and monitoring Information Security metrics, KRIs, KPIs, and management dashboards, highlighting material security exposures, control deficiencies, significant breaches, and remediation status.
• Assist the CISO in conducting Security Forums and other governance committees by consolidating Information Security posture, risk, incident, vulnerability, compliance, and remediation information for management review and decision-making.
• Lead and coordinate the country’s response to significant Information Security incidents, working with relevant stakeholders to assess business and regulatory impact, ensure appropriate escalation to management, and support decisions regarding regulatory notification/reporting.
• Monitor Information Security incidents, risks, exceptions, and remediation actions, ensuring appropriate ownership, timely resolution, and escalation of significant or overdue matters.
• Coordinate Information Security matters arising from regulatory reviews, Internal/External Audit, and independent assurance assessments, including responses, remediation plans, and supporting evidence for closure.
• Monitor emerging cyber and Information Security risks and recurring control weaknesses, assessing their potential impact and escalating material concerns to the CISO and relevant management forums.
• Provide risk-based Information Security advice and challenge to Technology and business stakeholders for new systems, digital initiatives, projects, outsourcing arrangements, and significant technology changes.
• Promote Information Security awareness and training across the Bank, reinforcing employee understanding of security responsibilities, secure practices, and protection of organizational and customer information.
• Drive continuous improvement in the country's Information Security control environment, working with relevant stakeholders to strengthen governance, monitoring, risk management, and regulatory compliance.

3. Environmental, Social, and Governance (ESG)

• Lead and coordinate the Bank’s implementation of Qatar Central Bank (QCB) ESG Supervisory Principles and applicable sustainability requirements, including regulatory gap assessments, ESG risk integration, governance, data and reporting, risk appetite, stress testing/scenario analysis, disclosures, and regulatory evidence management.
• Coordinate periodic ESG management reporting and regulatory submissions, monitor implementation milestones and remediation plans, and facilitate ESG integration across the three lines of defense.
• Support implementation of QCB’s Sustainability Reporting Framework and applicable ISSB-aligned reporting requirements, ensuring appropriate governance, data quality, documentation, and stakeholder coordination.

Qualifications

• 5-10 years of banking experience, with a minimum of 3-5 years in Risk Management MI & reporting.
• Comprehensive knowledge of general banking activities and Local and International practices on Credit Risk reporting.
• Excellent knowledge of MS Excel, SQL, and data warehousing tools.
• Familiarity with analytical tools/software such as SAS, SPSS, or equivalent.
• Ability to coordinate multiple projects/tasks.
• Graduate with thorough knowledge of Credit.
• Excellent interpersonal, problem-solving, communication, and analytical skills including proficiency in PC skills.
• Familiarity with operating systems, Financial, EDMS, Credit Systems, and Cards Systems.
• Comprehensive understanding of Compliance/Regulatory requirements.
• Minimum 3-5 years of experience in Information Security, including governance, policy procedures, security incident response, and security management.
• Knowledge of banking environment and international compliance, including PCI DSS, SWIFT CSP, GDPR, etc.
• Professional security certifications in Security and Risk Management are desirable.
• Strong team player.