Senior Manager - Tech Risk/ Governance/ Audit

My reputable client with a well established technology risk team is rapidly expanding to fulfil their business expansion. If you are keen to know more, please get in touch!

About the job:

• Enhance current practices to mitigate cyber risks and the establishment of a risk framework.
• Support and conduct security compliance and governance exercise and awareness refresh programme.
• Follow and execute risk management practices with Risk Registers, Issue Management, Risk & Controls Library, Impact Thresholds, Risk Reporting, Controls Testing, and Security Governance.
• Assess risks based on policy, standards, technology compliance requirements and best practices IT and business projects and activities.
• Ensure security measures properly adopted for risk mitigation.
• Risk exception and acceptance must be well governed, timely validated and properly escalated.
• Contribute to third-party risk management and well engage with and manage audit activities.

About the requirements:

• University degree or above in IT, Management Information System, cybersecurity and/or risk compliance.
• At least 5+ years of experience in IT technical roles and audit, 3+ years of hand-on in technology risk assessment and security compliance aspects.
• Experience in adopting risk-based assessment methodologies and engaging audit counter-parts.
• Knowledge of ISMS, ISO27000, ISO31000 and other major information security frameworks/Practices e.g. NIST, COBIT etc.
• Strong knowledge of Audit control framework, IT general controls, Cybersecurity Risk, Tech Risk (including infrastructure, cloud and applications security).
• Experience in performing risk assessment and evaluation.
• Competency consulting background in IT, Cyber Security and/or IT Audit and Control Compliance.
• An aptitude for technical writing e.g. assessment reports, presentations, management dashboard and risk indicators/metrics.