Expert, Technology and Digital Risk Management (40000875)

Job Purpose

1. Manage and monitor TDRM to ensure technology and digital risks are managed and mitigated within risk limit
2. Develop, propose and implement TDRM programs and activities to manage technology and digital risks
3. Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies, risk taxonomies and respective mitigation controls
4. Provide subject matter advices related to Technology và Digital innovation and implementation
5. Develop TDRM capabilities and improve bankwide TDRM awareness and culture

Key Accountabilities (1)

Manage and monitor TDRM
- Develop, propose and implement TDRM programs and activities to manage technology and digital risks
- Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies
- Develop technology and digital risk taxonomies and respective mitigation controls
- identify data collection requirements for TDRM data, develop TDRM data structure, model, dashboard and KRI to monitor technology and digital risks and forecast risk trends; and propose early actions to ensure technology and digital risks are managed and mitigated within acceptable level

Key Accountabilities (2)

Provide subject matter advices related to Technology và Digital innovation and implementation
- Evaluate technology strategy, business process, control automation and governance and compliance
- Evaluate the effectiveness of controls and oversee and oversight the design and implementation of controls.
- Support in investigation of cyber digital risk incidents and recommend solution/action to mitigate and manage risks

Key Accountabilities (3)

Develop TDRM capabilities and improve bankwide TDRM awareness and culture
- Conduct/ support training on subject matters to TDRM team members to improve team's capabilities and to fulfil the function's job requirements.
- Support other units to conduct training and communication to improve bank-wide TDRM awareness and culture.

Key Relationships - Direct Manager

Director, TDRM

Key Relationships - Direct Reports

Senior Officer of TDRM

Key Relationships - Internal Stakeholders

IT Division/ Business Divisions/ Opt Division/ Finance Division/ internal control functions/ Other Risk functions

Key Relationships - External Stakeholders

Experts/consultant/audit units, SBV

Success Profile - Qualification and Experiences

Experience:
- At least 06 years of relevant work experience and at least 02 years of people management experience
Expertise:
- Extensive knowlegde of technology and digital risks, information systems, information security, information system review
- Extensive knowledge of banking information system landscape and banking business operation
- Understanding the TCB information systems and business operation
Qualifications:
- Having a university degree or higher on Information Technology, Information System, Information Security or equivalent
- English: TOEIC 500 or equivalent
- Having professional certification on IT risk, information security, Information system review