Develop and deliver data privacy training and awareness communications, to promote understanding of regulatory obligations and risk management expectations.
Conduct security role reviews, risk assessments, and Segregation of Duties (SoD) analysis; identify access risks and recommend practical remediation plans for SoD violations.
Support the development and ongoing enhancement of policies and procedures across the transaction monitoring lifecycle, including rule validation, system optimization, and underlying data analysis.
Support the development and ongoing enhancement of policies and procedures across the transaction monitoring lifecycle, including rule validation, system optimization, and underlying data analysis.
Run internal rating models and undertake macroeconomic risk assessment to assign sovereign default and transfer and convertibility risk ratings to a Country
Identify operational irregularities, non-compliance issues, and areas for improvement, and follow up with the relevant outlet managers to ensure timely corrective action.
5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
Data Privacy: Data protection is important, since it prevents the information of an organization from fraudulent activities, hacking, phishing, and identity theft. Any organization that wants to work effectively need to ensure the safety of their information by implementing a data protection plan.
Key internal stakeholders - Internal Audit, Group Compliance, Group Risk, Group Legal, Group Ops & Technology, Enterprise Business Continuity Management,
Validating and substantiating reported delivery status across multiple sources and constructively challenging assumptions, forecasts, and recovery plans that are not adequately supported by evidence.