Head of Service- Tech Risk - Governance and Assurance

Job Description

Company DescriptionThe UAE?s largest bank and one of the world?s largest and safest financial institutions is growing its global presence. As a result of FAB?s international expansion, were looking to attract and retain the best talent, from Egypt to Hong Kong, from Sao Paulo to Geneva and everywhere in between. We recognize the difference our people bring to the business and #growstronger together.Strategic alignment

• Foster proper communication and coordination among TechGRC teams, to ensure that the team endeavours reflect a cohesive understanding of the Bank?s strategic, business, and technological objectives.
• Guide TechGRC teams in formulating GRC strategies.
• Identify opportunities and formulates technology strategies and roadmaps in line with the agreed strategy. Actively support and participate in development of IT strategic, tactical and operational plans.
• Monitor, evaluate, handle and report on the effectiveness of IT strategies, transformation plans and their alignment with bank?s objectives.
• Governance and Oversight
• Conduct process QAs within TechGRC to ensure adherence to relevant policies & procedures.
• Spot checks on sample of controls with Group Technology.
• Ensure implementation of the IT Governance Framework including maintenance of Governance Committee Charters and support management of relevant governance committees.
• Provide subject matter expertise on services and regulations to IT teams.

Regulatory Compliance

• Maintain external focus and demonstrate technical expertise and awareness of key industry standards and trends across IT Security and Risk management practices and accredited standards to assess their impact on IT Policies.
• Deliver compliance to recognised industry standards and required regulations proactively.
• Be proactive in informing and preparing IT Teams for upcoming legal, regulatory and industry requirements.
• Act as a point of contact for internal/external auditors and regulators for all IT Governance and Risk related items.

Controls and Reviews

• Responsible for development and maintenance of Unified Control Framework (UCF) and associated technology controls attributes and keeping these aligned with applicable regulatory requirements, emerging technologies and industry best practices
• Periodically assess IT controls, functions, policies and processes to ensure that they are optimally designed and operating effectively and efficiently.
• IT Risk and Security Management
• Ensure comprehensive IT risk management framework is established to identify, analyse, mitigate, manage, monitor, and communicate IT risks.
• Ensure the IT risk appetite and tolerance levels are understood, articulated, and communicated, and that IT related risks are identified and managed.
• Promote an IT risk-aware culture and empower the teams to proactively identify IT risk, opportunity, and potential business impacts.
• Manage Technology risk committee meetings and ensure closure of action plans.
• Identify, agree, and manage various assurance initiatives and internal reviews.
• Cloud & Digital Technology Management
• Actively participate in defining strategies for using cloud services as part of the bank?s strategic plan and technology architecture.
• Determine appropriate level of governance for cloud computing environments and ensure sufficient control processes are defined for onboarding and management of cloud solutions.
• Assess the risk implications of digital innovation and its impact on technology risk profile of the bank. Provide recommendations to optimize the risks and ensure technology policy and process alignment.
• Work with business and technology teams to better understand digital business risk and facilitate a balance between the need to protect the organization and the need to optimize customer experience.
• Continual Improvement
• Ensure continual adoption of industry best practices for overall governance & management of IT.
• Quantify the value add of the team from improvements in the control environment and reduction in risk to the IT and the business.
• Direct the team to implement proper communication channel to maintain IT Policy and process awareness among IT staff.
• Oversee development of key metrics and KPIs to ensure effective and efficient measures are in place.
• Promote an IT risk-aware culture and empower the teams to proactively identify IT risk, opportunity and potential business impacts.
• Ensure IT performance measurement systems are in place and accurate reports are shared with relevant stakeholders.
• Identify and lead risk automation practices and tools to streamline efficient operation of the team and seamless interactions with its stakeholders. Drive the Governance team to transparency of status backed by integrity and single source of truth data.

Resource Management

• Establish beliefs, values, attitudes, and unwritten guidelines to reinforce the TechGRC best practices and organizational culture.
• Work within TechGRC to establish appropriate right sourcing strategies.
• Work with various internal and external stakeholders to develop training & development plans for IT staff.
• Responsible for hiring, development, and leadership of staff, continuous improvement of department processes and tools.
• Lead and motivate people up and down the line to act in accordance with philosophy, policies, procedures, and standards in carrying out the plans.
• Responsible for engaging, empowering, developing, and rewarding a talented and highly dedicated team of IT Governance and Risk professionals.
• Operate an efficient workload planning process for the team and identify the appropriate resourcing solutions to deliver each objective.

QualificationsKnowledge & Experience:

• 13 or more years of working experience in IT Security, Risk and Governance practices.
• 5+ years of experience working in leadership role IT Security, Risk and Governance.
• Evidence of influencing senior stakeholders and dealing with external auditors and regulators.
• Excellent interpersonal skills and good oral and written communication skills.
• Good understanding of process models in ISO and industry standards relating to IT Security, Risk and Governance.
• Good understanding of security and risk management in financial institutions.
• Good understanding of innovations / trends in IT and fintech in particular
• Recent experience in the governance of agile and other digital/innovation ways of working.
• Good experience of enforcing good governance across an outsourced IT resourcing model.
• Strong analytical capabilities and knowledge of related tools and processes. Proven ability to handle volume detail and summarize effectively.
• Excellent knowledge all aspects of technology: infrastructure; operations, security, development, change/transformation, support, innovation, vendor management etc., and banking related processes especially risk management. Should have demonstrable experience of working in the majority of these domains.
• Good understanding of technology processes across a full service IT organization. Should have demonstrable experience in these areas.
• Good understanding of banking related environments ? especially around high availability, data confidentiality, security etc.
• Good understanding of project management to drive the team to deliver to objectives and to oversight the division?s change governance.
• Good understanding of technology trends to keep the policies and procedures ahead of the curve.
• Good knowledge in different IT process models (ITIL / ISO / COBIT etc.).
• High Performance attitude and track record to evidence.
• Adequate forward planning and implementation of improvement initiatives.
• Budget and cost management.
• Utilization of resources ? Effective utilization of staff to deliver planned and unplanned outcomes to agreed timelines
• User satisfaction ? Feedback from business units and other IT teams on the collaborative support provided by the unit.
• Quality ? Availability of record of activities carried out by the unit, in compliance with quality assurance requirements.
• Risk management ? Effective management of risks in the infrastructure operations.
• Vendor management ? Efficient use of outsourced vendor teams. Performance of vendors as per committed SLAs.
• Staff development ? Staff turnover, availability of skills, staff satisfaction, and talent management.

Skills:

• Relationship management
• Influencing skills
• Big picture thinker with attention to details
• Strong change and communication skills
• Strong analysis skills
• Strong interpersonal skills
• Resource (time and people) management skills

Keyskills :