Manager - Governance, Risk, Compliance and Resilience

JOB PURPOSE:

To lead and oversee the development, implementation and continuous enhancement of the Bank’s IT Governance, Risk, Compliance frameworks, ensuring alignment with the Bank’s strategic objectives, enterprise risk management framework, regulatory requirements and industry best practices.

The role is responsible for managing IT risk assessments, Risk and Control Self-Assessments (RCSA), IT policies and standards, regulatory compliance monitoring, key risk indicators (KRIs), and governance reporting to support effective risk identification, mitigation and management.

Additionally, the role oversees the IT disaster recovery and technology resilience arrangements, working closely with relevant stakeholders to ensure preparedness, effective controls and continuous improvement.

• Implement and maintain the IT Risk Management Framework in alignment with the Bank’s Enterprise Risk Management Framework, approved risk appetite and regulatory requirements.
• Establish, coordinate and periodically review the IT Risk and Control Self-Assessment (RCSA) process to ensure effective identification, assessment and mitigation of technology-related risks.
• Provide guidance to IT stakeholders on risk identification, assessment, treatment and control enhancement to minimise residual risk exposure.
• Develop, monitor and report IT Key Risk Indicators (KRIs) to assess risk exposure, control effectiveness and emerging technology risks.

Monitor IT risk mitigation action plans and ensure timely escalation of significant risks, control weaknesses and overdue remediation activities.

Risk Monitoring, Reporting and Stakeholder Coordination

• Ensure effective monitoring, reporting and escalation of IT risks in accordance with the Bank’s established governance and risk management procedures.
• Represent the IT Division in relevant Operational Risk Management forums and cross-functional engagements.
• Promote IT risk awareness and accountability across the IT Division through appropriate communication, guidance and awareness initiatives.
• Coordinate periodic technology risk assessments and monitor residual risk exposures against the Bank’s approved risk appetite and tolerance levels.
• Liaise with Operational Risk, Information Security, Compliance and Internal Audit to ensure coordinated risk management and timely resolution of identified issues.

IT Resilience and Disaster Recovery Oversight

• Oversee periodic review and continuous enhancement of IT Disaster Recovery (DR) plans to ensure alignment with business continuity objectives and regulatory requirements.
• Coordinate with relevant stakeholders to assess technology resilience capabilities, disaster recovery preparedness and recovery strategies for critical IT services.
• Monitor disaster recovery testing, identified gaps and remediation plans to support the Bank’s operational resilience objectives.
• Provide governance oversight and risk-related guidance on technology disruptions and other technology related events that may affect IT services continuity.

IT Governance, Policies and Compliance

• Develop, maintain and periodically review IT governance policies, standards, procedures and guidelines to ensure alignment with regulatory requirements and industry best practices.
• Conduct periodic gap assessments against applicable regulatory requirements, internal policies and recognized industry standards.
• Oversee the adoption and continuous improvement of relevant IT governance and management standards, including ISO frameworks, where applicable.
• Plan and coordinate IT governance, risk and compliance awareness programmes to strengthen control awareness and accountability across the IT Division.
• Monitor compliance with approved IT…