Manager - ITEC-Operational Security Management - BFSI

The Operational Security Management (OSM) group is the first line of defence in SG GSC's risk model. Working closely and collaboratively with each business line, the OSM function ensures that the risk culture is embedded within the business. The OSM function is responsible and accountable for the implementation of the Risk Program with the businesses in each area: Operational Risk, IT Risk and Business Continuity.

ITEC OSM would report in to Head of ITEC-OSM and will be instrumental in developing the operational risk culture within the assigned business unit ensuring its alignment with SG GSC policies.

ITEC is the information systems division of SG CIB. It specialises in developing, testing, maintaining and supporting IT applications for various business units of SGCIB like - CTT (Client & Trading Technology), DPR (Deal Processing Technology), RRF (Risk and Referential), etc.

The ITEC-OSM, will be responsible for the following for the business unit he is assigned to:

Primary Objectives:

Program/Initiative Rollout and Management:

- Align to central risk programs and initiatives and define and drive BL specific programs.

- Manage priorities and resources for roll out of identified risk programs.

- Manage different stakeholder expectations and optimize program for maximum effectiveness

- Monitor program rollout and intervene/escalate as appropriate to the BL head/Risk Sponsor.

Proactive Risk Management:

- Ensure adequate adequacy of controls; align controls to risk

- Constantly be on the lookout of identifying and addressing risks within the business line.

- Ensure appropriate Permanent supervision controls are implemented and are performed periodically

- Co-ordinate the Risk and Control Self Assessment (RCSA) exercise

- Ensure Business Impact Analysis is done for all the projects in respective business line. Assess the continuity options and the hot seat requirements

- Coordinate initiatives to contribute and measure the effectiveness of the risk management program

Reactive Risk Management:

- Accountable and responsible for report on Operational Losses and Incidents within the BL

- Responsible for managing incidents and losses to closure for the BL.

- Responsible for creating awareness within the business line about security and incident reporting

Monitoring and closure of Audit Issues:

- Responsible for compiling list of audit issues for Corporate Functions from all sources.

- Responsible for coordinating efforts for the timely closure of audit issues

- Responsible for managing the reporting process to track audit issues

Achieving consistency and synergies:

- Ensuring that the risk program is applied in the Corporate Function consistently and as per SG GSC and Group Policies and guidelines

- Ability to optimize resources by automating risk management methodologies and processes

Internal/External stokeholds to deal with:

- Business line risk sponsors, Business line heads.

- OSM network across the geography.

- Central risk teams Consisting of Information Security, Business Continuity and Operational risk management team

Key Skill Areas & Knowledge Required:

- Basic Graduation in Science, Computer science or Engineering;

- Ideally Possesses certifications like CISA, CISSP, but not a must.

- Previous work experience managing operational risk / IT Security in Banking and/or Financial services domain and deep understanding of Risk management or audit areas.

- 6-10 years experience with at least 3-4 years experience in risk / IT Security management

- Excellent communication skills

Behavioural Competency Required:

- Be highly autonomous in the execution of his/her assigned duties

- Self motivation, able to drive risk methodology

- Good communication skills and ability to convey messages to Management

- Highly motivated and ability to work with a team

- Ability to work in an constantly changing environment and manage priorities and schedules

- Ability to work in a position that has accountability with minimal authority over stakeholders

Team Details:

- Individual contributor