RBWM Chief Operating Office / RBWM Business Risk and Control Management

We are currently seeking a high caliber professional to join our department as RBWM Business Information Risk Manager.

Principal responsibilities:

• Monitor compliance review activities and follow up on deficiencies identified and ensure remediation steps have been taken.
• Perform IT infrastructure / application security control review for technology project.
• Resolve negative audit findings reported by security audit team and track the remediation progress.
• Supporting the implementation of information security projects and processes.
• Engaging in new business projects and initiatives to proactively advise on the level or type of information security risk engagement required
• Identify security risks and breaches to ensure the organization’s assets and information are appropriately secured all the time.
• Recognize and response to potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and information.
• Investigate information security incident and coordinate with relevant parties to gather incident details, conduct impact analysis, obtain response, perform after-incident reporting and root cause analyzes.
• Provide response for information security related enquiries.
• Conduct regular or themed staff awareness program and training with business parties.
• Continuously and proactively monitoring established information security risk controls against new and existing information security risks.

All information provided by applicants will be used only for recruitment purposes and will be used strictly in accordance with the Bank's personal data policies, a copy of which may be obtained by the applicant upon request. Unless otherwise instructed in writing by the applicant concerned, applicants may be considered for other suitable positions within the Bank and its related companies. The personal data of unsuccessful job applicants may be retained for a maximum of two years from the date when the job application is rejected and such data may be retained for a longer period if there is a subsisting reason that obliges the Bank to do so, after which the personal data will be destroyed.