全职 Executive, Technology Risk Management 工作, 薪水, CTOS Selangor 公司招聘中 - Ricebowl

ROLE OVERVIEW

The Executive, Technology Risk Management supports the Group's Cyber & Technology Risk Management function by assisting in the monitoring, assessment, reporting and governance of technology risks across CTOS Digital Group. The role is responsible for maintaining technology risk records, monitoring key risk indicators (KRIs), tracking remediation activities, supporting governance reporting, coordinating risk assessments, and overseeing the closure of technology risk actions. The position operates within the Second Line of Defence and does not own, operate, or administer technology infrastructure, cybersecurity controls, cloud platforms, applications, or technology operations.

KEY RESPONSIBILITIES

Technology Risk Monitoring & Administration

• Maintain technology risk registers, issue registers and risk acceptance records.
• Monitor and update technology risk action plans, remediation trackers and management action plans.
• Follow up with action owners on overdue risk treatment activities.
• Support periodic technology risk assessments and risk profile reviews.
• Maintain governance documentation, policies, standards and records.
• Support the administration of technology resilience and operational risk records.

Risk Reporting & Governance

• Prepare technology risk dashboards, KRIs and management reports.
• Compile risk metrics and management information for reporting to Management and Board Committees.
• Assist in preparing committee papers, presentations and governance materials.
• Track governance decisions, risk issues and action items.
• Perform trend analysis on technology incidents, outages and operational resilience metrics.

Audit, Regulatory & Compliance Monitoring

• Maintain registers relating to audit findings, regulatory observations and independent assessments.
• Monitor remediation progress and escalate overdue actions where necessary.
• Support evidence collection, validation and closure activities.
• Assist in regulatory engagements and compliance reporting.
• Maintain documentation required for internal and external reviews.

Technology Risk & Resilience Oversight

• Support reviews of technology risks across infrastructure, applications, cloud services and technology projects.
• Monitor risks relating to system availability, disaster recovery, cyber resilience and technology obsolescence.
• Track remediation arising from technology incidents and service disruptions.
• Maintain records relating to disaster recovery tests and business continuity exercises.
• Support resilience-related assessments and reporting.

Change, Project & Third-Party Risk Management

• Support risk reviews of significant technology projects, system implementations and technology changes.
• Monitor technology project risks, change-related issues and remediation activities.
• Assist in technology vendor and outsourced service provider risk assessments.
• Maintain third-party technology risk registers and monitoring records.
• Track completion of vendor remediation plans and assessment activities.

Technology Incident & Risk Event Monitoring

• Record and monitor technology incidents, service disruptions and technology risk events.
• Track closure of corrective and preventive actions.
• Assist in root cause analysis reviews and lessons learned tracking.
• Prepare management reporting on incident trends and recurring issues.

Risk Culture & Stakeholder Support

• Support technology risk awareness and communication initiatives.
• Assist in coordinating technology risk training and awareness programmes.
• Engage with Technology, Security, Compliance and Business stakeholders on risk governance requirements.
• Support implementation of technology risk management initiatives and continuous improvements.

Key Accountabilities

The incumbent is accountable for:

• Accuracy and completeness of technology risk registers, trackers and governance records.
• Timely monitoring and reporting of technology risk issues.
• Effective tracking of audit, regulatory and assessment findings.
• Quality and timeliness of technology risk reporting and management information.
• Maintenance of risk documentation, evidence repositories and governance artefacts.

WHAT DOES IT TAKE TO BE SUCCESSFUL?

Education

• Bachelor's Degree in Information Technology, Information Systems, Computer Science, Cybersecurity, Engineering, Risk Management or related discipline.

Professional Certifications (Advantageous)

• CRISC (or pursuing)
• CISA (or pursuing)
• COBIT Foundation
• ITIL Foundation
• ISO/IEC 27001 Foundation
• CGEIT (advantageous)

Experience

• 1-3 years of experience in technology risk, IT governance, IT audit, cybersecurity governance, operational risk, compliance or related disciplines.
• Familiarity with risk registers, audit findings management, compliance monitoring or governance reporting.
• Knowledge of technology risk management frameworks and regulatory expectations is preferred.
• Experience within financial services, fintech or regulated industries would be advantageous.

Skills & Competencies

Governance & Documentation

• Strong organisational skills with the ability to maintain accurate records, trackers and governance documentation.

Reporting & Analysis

• Ability to analyse information, identify trends and prepare concise management reports.

Risk Awareness

• Understanding of technology, cybersecurity and operational resilience risks.

Stakeholder Management

• Ability to coordinate effectively with stakeholders across Technology, Risk, Compliance and Business functions.

Communication

• Good written and verbal communication skills with the ability to present information clearly and professionally.

Professionalism & Integrity

• Demonstrates objectivity, independence, confidentiality and strong personal accountability