Full Time (Contract - 2 Years) Manager, Risks, Tools, and Processes, Risk Management Jobs, salary up to MYR 3,299 in Bank Negara Malaysia Bandar Kuala Lumpur - Ricebowl

Risk reporting: Report and provide risk assurance to senior management and Board.

• Provide risk assurance to senior management and the Board, including findings from thematic reviews.

• Continuously monitor the environment to identify, assess, and escalate emerging and existing risks, along with proposed solutions

Risk governance, framework and policies: Develop, maintain and ensure effective implementation of risk frameworks and policies.

• Review and refine the Bank’s information security policies to protect critical information assets. Ensure the effective implementation of information security risk frameworks and policies.

• Assess and update the Bank’s risk appetite statement as needed, ensuring continuous monitoring for potential breaches, with escalation to management when necessary.

• Track potential threats and vulnerabilities using information security risk metric.

Risk culture and outreach: Promote the development of risk knowledge among staff to build a strong risk management culture.

• Collaborate with the awareness team to promote a strong risk culture on information security in the Bank.

•  Enhance staff knowledge and awareness of information security risks

Risk tools and processes: Develop, maintain and ensure effective implementation of tools and processes. 

• Provide independent assessments of data entered by 40 departments for Information Asset Profiling (IAP).

• Ensure accurate and complete data for information security incidents in IRAISE.

• Ensure clean and accurate data from the existing IAPs of 40 departments isposted in the GRC system.

Risk analysis and advisory: Provide an independent technical and advisory view of related risks, from an enterprise perspective with the objective of adding value, strengthening, and improving the Bank’s operations through risk mitigation proposals to various risk committees in a timely and effective manner.

• Provide an independent advisory input to enhance risk mitigation efforts and improve Bank operations.

• Conduct thematic reviews on information security risks and provide recommendations as needed