VP Specialist Technology Risk Reporting

Business Function
Risk Management Group works closely with our business partners to manage the bank’s risk exposure by balancing its objective to maximise returns against an acceptable risk profile. We partner with origination teams to provide financing, investments and hedging opportunities to our customers. To manage risk effectively and run a successful business, we invest significantly in our people and infrastructure.
Technology is key to enabling the DBS vision of being the leading bank in Asia. We are constantly challenged by ever changing technology landscape, increasing customer sophistication / demands and introduction of new / updated regulatory requirements. We need passionate Technology Risk Managers who play a high impact role as second line function in enhancing the bank’s technology risk and cybersecurity posture. This includes identifying potential technology and cybersecurity risks associated with existing, evolving and new technology systems and business processes, assessing potential impacts and engaging with other technology leaders on the risk treatment options based on enterprise risk appetite. Risks and mitigation plans are reported to senior leadership for review and attention.

The Role
The incumbent is a driven, self-starter, who plays an active role working in a dynamic environment with the Technology risk teams and is expected to have analytical skills to assess information and identify potential risks, be inquisitive on risks and controls issues. The incumbent is responsible for delivering effective governance forums on technology risks including tracking and reporting.

Responsibilities

1. Analyse and identify emerging trends, hotspots, systemic issues and potential technology risks and controls issues.
2. Analyse trends, anomalies and behaviours and work with technology stakeholders to design and implement technical IT risk measures that are relevant to the Lines of Business.
3. Use data driven approach and possess extensive experience with reporting tools and relevant programming languages to improve efficiency.
4. Responsible for supporting and delivering effective risk governance committees on technology risks including tracking and reporting.
5. Perform thematic second line assurance reviews, including short and targeted focused reviews for areas of topical and key concern.
6. Ability to work independently, prepare and write comprehensive reports for senior management on technology risk management activities and risk events for presentation to risk committees.
7. Ability to communicate complex technology risk concepts in a clear and concise manner.

Requirements

1. University degree or equivalent, with major study in finance, accountancy, business and/or technology.
2. At least 8 years of working experience in banks or financial institutions, with good understanding of operational risk, banking products and processes.
3. Aptitude and experience in risk and control related roles in first or second lines of defence and familiar with reporting tools.
4. Strong communication and facilitation skills; able to work with and influence stakeholders at all levels.
5. Strong analytical and problem-solving capabilities with affinity to using data to solve problems.
6. An analytical thinker with good risk sense and affinity to using data to solve problems.
7. Positive attitude to change, constantly looking for better ways to get things done and to challenge status quo.
8. Self-driven and able to balance creative and pragmatic approaches.
9. Professional memberships and security certifications would be considered favourably (e.g., CISA, CISSP, CISM, CCSP, etc.).
10. Professional security or risk management certifications.
11. Certified Information Systems Auditor (CISA).
12. Certified Risk & Information Systems Control (CRISC).
13. Certified Cloud Security Professional (CCSP).
14. Certifications related to SRE such as SRE Practitioner.

Work Relationship

1. Support the Head of Unit in discharging the responsibilities of the team.
2. Contribute as a member of Team with ability to independently review and challenge Line1 and work with Line1.5 to enhance risk and controls.
3. Develop relationships with colleagues in the technology organisation.