Assistant Manager, IT Governance

About you

• You’re a go-getter with mad juggling skills (or multiple hats) who can thrive in a fast-paced, agile environment.
• You have a strong thirst for knowledge and are driven to find solutions that don’t exist yet.
• You are comfortable with ambiguity and extremely resourceful (in your past life you could’ve been a detective)
• You always find a way to get things done without sacrificing the quality of your work, integrity and values. No task is off limits for you.
• You are humble and prioritize the success of the team over your own with an eagerness to help those around you.
• You don’t shy away from challenges and have the ability to bounce back from setbacks.

About This Role

• Planning the implementation of processes and procedures for the identification and assessment of risk in the Bank’s information system.
• Refine, implement and develop relevant IT policies, procedures and guidelines to meet compliance and regulatory requirements
• Perform detailed analysis of the control environment to gain assurance over effective operation of controls
• Produce weekly technology risk MIS reports (eg KRI, Dashboards) for IT, Risk, Compliance and Business Management
• Identify and remediate control and performance gaps compared to leading practice, help internal technology teams to gain stakeholder buy-in in order to reduce risk and increase value and visibility of IT cost
• Work with stakeholders, audit, risk and compliance colleagues in developing a strong environment whilst maintaining relationships
• Assess IT environments and IT-related business processes that support the virtual bank to determine extent to which reliance can be placed on internal control environment
• Gain understanding of IT applications and infrastructure to determine effectiveness of the control environment through performing and reviewing process walkthroughs
• Identify control weaknesses and mitigate controls, articulate control findings to key stakeholders
• Provide the necessary technology risk guidance and training to IT Team
• Coordinate engagements with regulators, including periodic reporting, preparation of presentations and written deliverables of regulatory requirements for IT related
• Act as a liaison to internal/external auditors, fulfil audit requests, coordinate audit activities with IT stakeholders, and ensure implementation of audit recommendation.

What is required and what we’re looking for

• Degree holder in Information Technology or equivalent disciplines
• 5 years’ of experience in IT governance, risk management, compliance, audit role(s), preferred in financial services or banking industry
• Certification in IT Security Risk area (e.g. CISA, CISM, CRISC, CISSP, CompTIA Security+, or similar certifications) would be an added advantage.
• Have a broad understanding of information security policies and standards, as well as regulatory and compliance frameworks (e.g. ISO27001, PCI-DSS & POJK)
• Good knowledge on security standards and framework (COBIT, COSO, NIST) and risk management practices.
• Experience working with Internal Audit, Risk Management, and Legal & Compliance functions.
• Excellent problem-solving and negotiation skills.
• Strongly analytical, independent with good interpersonal skills.
• Excellent verbal and written Bahasa and English.