Section Head, Technology Risk Governance, Information Security Department
Description
About the role
The Section Head, Technology Risk Governance is responsible for reviewing and improving the ISD Framework, Policy, and Procedure. The role involves managing communication with external stakeholders including BNM, PayNet, SWIFT, and External Audit, as well as internal stakeholders such as the Compliance Liaison Officer, Compliance Department, ITSD, Digital Banking, Business Units, and Subsidiary. The position requires reviewing and managing ISD reports on a yearly, quarterly, monthly, and ad hoc basis, as well as departmental finance including budget and spending. The role provides advisory on Technology Risks, performs and manages Technology Risk Assessments, conducts IT Risk Awareness initiatives, and represents the department in meetings as necessary. The Section Head manages departmental goals from planning to completion, reports on work status and progress, manages subordinate-related matters including training and leave, proposes improvements on department initiatives and processes, and performs tasks assigned by the supervisor.
Key responsibilities
Review and improve ISD Framework, Policy, and Procedure
Manage communication with external stakeholders (BNM, PayNet, SWIFT, External Audit)
Manage communication with internal stakeholders (Compliance Liaison Officer, Compliance Department, ITSD, Digital Banking, Business Units, Subsidiary)
Review and manage ISD reports (yearly, quarterly, monthly, ad hoc)
Review and manage departmental finance including budget and spending
Provide advisory on Technology Risks
Perform and manage Technology Risk Assessments
Conduct and manage IT Risk Awareness
Represent department in meetings as necessary
Manage departmental goals from planning to completion
Requirements & Qualifications:
At least 12 years of relevant experience in Information Security / IT Risk management position preferably in development banking and or relevant banking / financial environment
A graduate degree in Information Technology / Computer Science or other relevant major
Preferably a professional certificate in Information Security / IT Risk / IT Security
Exposure to IT technical and governance tasks e.g., security administrator, system, and network administrator
Knowledge of Technology Risk – Assessment, follow-ups, and reporting
Ability to prepare awareness materials for staff and coordinate with Academy, Business Units, Corporate Communication
Knowledge of Framework, Policy, and Procedure development and maintenance
Presentation skills to present updates to relevant groups and committees
Problem solving skills to analyze information security issues and recommend solutions
Technical knowledge of security controls e.g., Cloud, Firewall, DLP, SIEM, System and Network Administration
About us
Agrobank is a development banking institution focused on supporting the agricultural sector and related industries. The organization operates with core values of Professionalism, Positive Attitude, Teamwork, Respect, Integrity, Open Communication, and Timeliness, committed to providing quality service and sustainable business practices.
