Senior Analyst - IT Risk - BFS

Senior Analyst IT Risk

Key Accountabilities :

Technology Risk Management Framework :

1. Review and provide inputs on IT risk management framework to ensure efficiency and effectiveness of the process performance

2. Review and provide inputs on technology policies, processes & standards to ensure proper coverage of technology controls and metrics

3. Conduct regular reviews and assessments to assess adherence to Group policies and standards for effective implementation within Group Technology (GT)

4. Review and provide input on standard technology risk and control library

5. Implement the cyber risk assessment model and analysis approaches

6. Conduct various assurance initiatives and internal reviews across GT

7. Identify and implement control automation initiatives across GT

Cloud Management :

- Participate in conducting due diligence of cloud service providers and ongoing cloud service providers assessments.

- Assess cloud solutions and determine risk of technology architecture, implementation, and suitability for the organization.

- Review cloud service providers contracts for compliance with Group policies/processes and ensure relevant controls are considered in the contract with cloud service providers.

- Assess the risk implications of digital innovation and its impact on technology risk profile of the bank.

- Provide recommendations to optimize the risks and ensure technology policy and process alignment.

- Conduct in-depth technical security reviews, risk assessments, and architecture reviews for Cloud base technologies and solutions to ensure alignment with information security policies and technology guidelines.

DevOps/DevSecOps/Agile Practices :

- Provide inputs to development and maintenance of policies, frameworks, methods and standards for the DevOps and agile practices.

- Ensure risk and security control requirements are considered during the early stages of the development lifecycle

- Review possible bottlenecks of running the application in production and suggest service improvement plans.

Technology Risk Identification & Assessments :

- Work with service teams on various risk and control assessments activities and ensure technology risks are managed as per FAB policies and standards.

- Participate in Project & Change reviews to ensure appropriate treatment of technology risks.

- Execute periodic risk assessment activities to identify vulnerabilities, threats and control effectiveness.

- Assess the severity of each risk by assessing likelihood and impact. Work with stakeholders on the residual risk ratings and potential risk exposure.

Technology Risk Treatment & Review : Support development of risk treatment strategies to maintain the bank's risk posture at the desired level.