Senior Manager, IT GRC - Information Security

Top 3 reasons to join us

• Extensive leave up to 21 - 22 days per year
• English speaking working environment
• Hybrid working mode

Job description

As a Senior Manager, IT GRC (Governance, Risk and Control) - Information Security, you will be responsible for the following tasks:

• Contribute and support Head of Group Information Security in defining, developing and maintaining IT GRC framework in all FWD markets in accordance with the Group Technology Roadmap.
• Work closely with senior management of business units and within Group Technology through tracking and reporting function, to ensure regular updates to management on the IT GRC projects.
• Be accountable for the planning, management and execution of the day to-day activities of Technology related audit engagements.
• Ensure system and control owners are identified; and coordinate with owners to support IT GRC and assessment activities.
• Collaborate with information security team, business, risk, audit and compliance teams to identify, evaluate and address critical technology
  related risks.
• Proactively research industry trends and define, influence and implement appropriate and practical technology related KRIs, metrics and solutions to create and enhance process efficiency and address key risks.
• Define, oversee and ensure all test scenarios for effectiveness of the internal controls and provide guidance to remediate the deficiencies/ weaknesses.
• Ensure FWD readiness for IT Security Internal/External audits.
• Advise BUs on Technology risk assessment.

Your skills and experience

• Minimum 8-10 years of experience in IT Audit and IT GRC
• Bachelor Degree from Information Technology or equivalent discipline
• One of industry recognized certification such as CGEIT, CISSP, CISM, CISA, ISO 27001, CRISC, PCI DSS etc.
• Excellent stakeholder management and communication skills.
• Project delivering experience
• Solid understanding of current and emerging technologies.
• Understanding of IT SOX and other IT/IS frameworks and best practices such as COSO, COBIT, ITIL, ISO 27001, SOC 2, 3, etc.
• Good knowledge of privacy regulations and data protection.
• Detailed oriented and able to work under pressure and accustomed to work under tight deadlines.
• Team-oriented, collaborative, diplomatic and flexible.
• Strong written and verbal communication skills, strong interpersonal skills and the ability to communicate effectively across business units.

Why you'll love working here

• Attractive salary and benefits  
• Extensive leave up to 23 days per year
• Health insurance for employee + spouse & children  
• Professional and multi-culture working environment