Technology Governance Specialist

This role will drive the governance and compliance roles within Technology department, by establishing the appropriate information technology and information security policy frameworks, driving compliance and best practice standards, and ensuring that risk management is well managed and enshrined within Technology department across functions. This role will also improve Technology Services; manage the Business Continuity program for Information Technology, ensuring that TECH services are available to the business and customers in the event of any unforeseen disruption, within the agreed service levels, including:

Policy & Governance Framework

-  Custodian of Technology and Security policies and process governance frameworks across the Group.

-  Manage Technology and Security policy framework, including creation, review, update, awareness and monitoring of policies.

-  Keep up-to-date with regulations and guidelines affecting information technology and information security, and continuously update TECH’s policies, standards and procedures.

-  Administration and management of Information Technology and Information Security processes.

Risk & Audit Management

-  Manage TECH risks and practices within Technology department; including Risk Control Self Assessments (RCSA) and IT risk registers, across functions.

-  Manage and act as the key liaison for all Internal and External TECH audit and risk assessment engagements across the functions.

-  Track and report on TECH audit and risk findings, including managing TECH management forums for discussion and reporting of these findings.

Business Continuity Planning

-  Manage the Business Continuity Program (including IT Business Impact Analysis) within TECH, across the functions.

-  In liaison with the TECH managers/leaders, maintain up-to-date disaster recovery plans and ensure recovery procedures are effective for restoration of key TECH systems and therefore resumption of critical business processes

-  Manage Disaster Recovery and backup testing schedules, reporting and remedial actions.

Training Skill

-  Organize sharing sessions for providing guidance to TECH and driving technology best practices (ISO/IEC 27001:2013, ISO 9001:2015), while enshrining these with the TECH policies and practices.

-  Manage the Information Security Awareness program, including awareness trainings, and reporting.

-  Bachelor’s Degree in, Information Systems, Computer Science, Information Security or related field required

-  3+ years’ experience in IT, Information Security or conducting information security awareness training.

-  2+ years’ experience conducting IT compliance assessments or IT governance and assurance/compliance assessments, internal audit (ISO 9001 and ISO 27001).

-  Relevant certifications in information security knowledge areas, such as Information Systems Audit, Information Security Management or Business Continuity/Disaster Recovery.

-  Knowledge of information security best practice & compliance standards.

-  Knowledge and experience in audit management and reporting.

-  Negotiation skills to communicate and discuss with stakeholders

-  Prior experience working in Compliance will be an added advantage.

Please kindly send your most updated resume to the address below and receive an interview notice within 3 days. We regret that only shortlisted candidates will be notified.

Not something for you now?  Our additional on-going projects include (but not limited to) artificial intelligence, deep learning, machine learning, biometrics, document imaging mobile apps and so on. Send us your CV for other opportunities.