Senior Manager/Manager - Technology Risk

Senior Manager / Manager IT - Technology Risk

Department / Functional Area: IT

Reports to: Director - IT/ CTO

Job Grade/Level Senior Manager / Manager

Work Location: Sri Lanka

Position Objective: Establishing and ensuring IT Security, Risks and Governance Framework to be compliant to the Group and regulatory requirements and to ensure that the IT compliance function is effectively managed within the organization.

Roles and Responsibilities:

Information Security

- Implement the group information security and tech risk framework (around application security, infrastructure security, identity and access management and cyber security) at the business unit with special emphasis on upgrading BU's existing defense mechanism in partnership with group technology risk

- Monitoring internal control systems / Logical/ physical access to ensure that appropriate information access levels and security clearances are maintained

- Enforce group wide minimum standards across information security

- Initiating, facilitating, and promoting activities to foster information security awareness within the BU including user training.

- Establish incident reporting procedure for reporting information security incidents and investigations in line with group requirements.

- Facilitate third party risk assessment processes in accordance with the group standards.