Role Purpose:

To develop a partnership with Asia Pacific Private Banking IT to help analyse, manage and address IT risk and security for the region. You will be working with the global IT Risk AMS for thePrivate Banking IT team to leverage expertise, provide feedback and execute global initiatives in the region.

Main duties and responsibilities:

• Work with APAC PB IT in the region to address and manage IT risk items and control issues encountered in daily operational activities, internal and external audits.
• Liaise with APAC PB IT management team to understand the IT strategy and operations, communicate roles and initiatives, and build a productive working relationship.
• Define and carry out the book of work items related to the PB IT, based on local, regional and global initiatives.
•  Work with fellow IT Risk AMS client coverage team members to cross cover risk and control issues identified in Asia.
• Work with Global IT Risk teams to develop/enhance risk and security policies and standards, and devise communication plan to APAC PB IT 
• Communicate and advise APAC PB IT applicable security policies and standards
• Provide advisory (when required) during definition of security architecture framework(s) to provide a secure environment for transaction processing, in accordance to both internal and external standards.
• Function as the key coordinator for internal and external IT audits applicable to APAC PB IT. Coordinate with IT, business, and functional departments to prepare for, analyze, and provide response or solution to control, audit and regulatory related matters.
• Coordinate the review of audit logs, and quarterly user access reviews applicable to APAC PB business.
• Ensure timely reporting of MACOS controls and work with relevant IT teams to complete SOX testing.
• Develop education program to provide better understanding of the responsibilities and requirements, and relevant knowledge of IT risk management policies and practices to Asia Pacific PB IT to help safeguard information and computing environment as a corporate asset.

Person Requirements:

• The successful candidate will come from an Information Risk Management background and will ideally have experience in audit / consultancy firms.
• Candidates must be certified in CISSP, CISA, CISM.
• PMP certifcation is preferred.