VP2, Risk Analyst, Technology Risk Management

United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices. Our history spans more than 80 years. Over this time, we have been guided by our values – Honorable, Enterprising, United and Committed. This means we always strive to do what is right, build for the future, work as one team and pursue long-term success. It is how we work, consistently, be it towards the company, our colleagues or our customers.

About the Department

The Credit and Risk Management function is comprised of three teams: Risk Management, Credit and Special Asset Management. We manage the risks arising from the Group’s business activities within the risk appetite established by the Board. This involves identifying and evaluating the risks, developing effective risk governance and strategies as well as providing independent assessment of the overall risk profile.

Job Responsibilities

This is a senior role that will be responsible for the roll-out of Technology Risk Management (TRM) programme in UOBM in accordance with group-wide initiatives as well as in-country initiatives and regulatory requirements. TRM in UOBM provides oversight over technology and cyber risk as the 2nd line. The role is instrumental in supporting TRM Lead any TRM programme or initiatives for UOBM. The role will work closely with the businesses and the technology teams to deliver effective and holistic operational risk governance for technology in the bank. The responsibilities of the role include but not limited to:

• Support TRM Lead in the regular review and roll-out of Technology Risk Management related reports to senior management and relevant forums;
• Drive the establishment as well as strategize and implementation of Technology Risk Management (TRM) activities or initiatives as part of the group-wide or local rollout of the TRM programme;
• Manage and formulate Technology Risk Management Framework and any associated technology risk management policies;
• Facilitate, support and effective challenge to the Business and Support Units in risk assessment, validation of risk management activities, risk deviations, risk metrics, action plan, due diligence and any relevant roles as per the Bank’s policy and programmes to address prevailing and emerging cyber or technology risks;
• Facilitate and manage BAU operational programmes involving technology risk, e.g. incident management, KRI, RCSA, third party management;
• To oversight and adhere to regulators’ requirements and guideline, e.g. BNM RMiT, Paynet guidelines.
• Formulate and provide independent reporting on the technology and cyber risk posture;
• Perform analysis of technology risk metrics for emerging risk trends and proactively work with business/ support units to address the risk;
• Develop and maintain strong business and technology relationships, becoming a trusted partner. Provide advisory, guidance and recommendations if necessary;
• Provide advisory and guidance on technology risk management as necessary for stakeholders, Business or Support Units through operational and technology risk programmes or any relevant forums.
• Provide oversight on the embedded risk function or technology assurance team residing within Technology & Operations of UOBM;
• Build a culture focused on the pro-active awareness and improvement of the risk environment.

Job Requirements

• Experience or knowledge in Technology Risk Management related domain is preferred. Minimum 8 or more years of experience or knowledge related to technology risk management, cybersecurity, information security, IT governance, Technology assurance, and / or IT audit. Experience in Financial Services industry will be an advantage.
• Possess Degree in IT or equivalent and preferably with professional certifications such as CRISC, CISA, CISM, CISSP;
• Strong demonstrated knowledge/ experience in technology risk management gained as a practitioner and able to relate to associated business risk;
• Good understanding of technology and cyber risk regulatory requirements in Malaysia and the region, such as RMiT, Paynet. Preferably with experience or understanding on industry-led standards, frameworks and practices such as NIST, COBIT, ISO.
• Possess strong communication skills and capable of engaging senior stakeholders as well as relate to different levels of the organization;
• Strong leadership skills including the ability to lead and drive projects, initiatives, action plans across multiple Business and Support Units;

Self-driven with ability and energy to design and drive change;
Experience in working with diverse cross geography teams;
High integrity, personal and professional conduct.

Be a part of UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a difference.