Risk and Information Security Officer

Qualifications:

• Bachelor’s Degree Holder in Information and Technology or Computer Science

• At least 3 years of experience in IT Audit or Risk Management/Information Security

Job Schedule:

• Full-time; Monday to Friday, 8:00 am to 5:00 pm

• At least 2 Saturdays in a month for Seminars, Trainings, or Workshops

Job Description:

1. Proposes enhancements to risk management policies, processes, and systems to ensure that the bank's risk management capabilities are sufficient and effective to fully support strategic objectives and risk-taking activities

2. Helps in developing risk appetite and risk appetite statement of the Bank and translating the risk appetite to risk limit structure

3. Conducts risk assessment as necessary and recommends applicable control measures

4. Conducts stress testing activities

5. Involved in the reviewing the IT outsourcing contracts, system development, or acquisition activities to verify the adequacy of the control and information security requirements

6. Identifies, documents, and recommends security requirements for information system

7. Conducts information and security compliance testing

Location: Executive Office