Job description
For each assigned review you will report to Head of Technology Risk – RISQ CTL. You will be expected to:
-
Assist/ Lead/manage the risk assessment, scoping and planning of a review.
-
Assist/Lead/manage in presenting the scope, progress, and results of the review to internal stakeholders.
-
Assist/ Lead/manage in executing the review. Specifically focusing on the following:
-
Analyze the design of controls around the underlying system architecture in the context of information technology/information security controls and its impact on the business.
-
Analyze the business and technology processes to evaluate the design and effectiveness of the relevant technology controls by designing and executing tests to validate identified system control features, which may require data analysis, code inspection and re-performance of system processes.
-
Document the results of the test steps executed project repository as per the departmental guidelines and best practices.
-
Assist/Lead/manage in vetting review observations/findings.
-
Assist/Lead/manage in the report preparation
-
Assist/Lead/manage in tracking, monitoring, and recording remediation of risks identified in reviews.
-
Assist/manage the Continuous Monitoring of technology business units to pro-actively identify changes to the risk profile of the business units/service units.