Unit Head - Technology Risk Management

As the Unit Head of Technology Risk Management, you will define and develop IT Risk Management Strategy to support IT and Enterprise Strategy. Your responsibilities will include connecting the management of IT risks to business objectives and continuously improving the IT Risk Management framework and tools to ensure effective risk management decisions.

Key responsibilities will involve developing IT Risk Management policies and procedures, embedding risk management practices in all IT operational processes, and aligning IT risk management with the Operational Risk Management Program. You will establish IT risk management practices to assure that they are effective and that IT risks do not exceed the Group's risk appetite.

You will also be tasked with identifying, assessing, and reducing current and emerging IT risks, ensuring Risk Control Self-Assessment (RCSA) reviews are conducted effectively and comprehensively. Your role will include maintaining ITD’s Risk Profile with proper documentation of known IT risks and control activities, providing subject matter expertise, and ensuring regular reporting to executive management on IT risk management activities.

Required Specialist Skills / Technical Knowledge:

• Expert understanding of IT Risk Management, Control, and Governance frameworks (e.g., ISO 31000, ISO 27001, COBIT).
• Expertise in performing IT Risk Assessments and Risk-Based IT Audits.
• Thorough understanding of overall IT systems, processes, and operations.
• Excellent analytical skills to analyze large amounts of data effectively.
• Strong problem-solving skills for creating strategies to manage IT risks.
• Excellent communication and collaboration skills for conveying IT risks and collaborative risk reduction efforts.
• Proven leadership skills for guiding the IT risk management team.