Operational Resilience Risk Control Senior Specialist

Purpose

As our Operational Resilience Risk Control Senior Specialist, you will join a specialist team and will be responsible to provide independent oversight and guidance on the implementation and effectiveness of the Bank’s Operational Resilience framework, focusing on Digital Operational Resilience testing program and ICT third-party service providers management.

Ideally from a financial services background, the successful candidate will be risk and control oriented with material exposure in at least one of the following areas: ICT and cybersecurity, digital operational resilience testing, business continuity planning, organization and project management.

What you will be doing

• Contribute to the review of the Digital Operational Resilience Strategy.
• Coordinate the development of the Digital Operational Resilience Testing Program, ensuring alignment with the Bank’s Digital Operational Resilience Strategy and compliance with Digital Operational Resilience Act (DORA).
• Actively contribute to the evaluation of test results and provide input for the formulation of Risk Management’s Function opinion.
• Support the coordination of the development of ICT Business Continuity planning and its testing program. Contribute to the evaluation of the adequacy, effectiveness and efficiency of the plans.
• Review and assess the ICT incident management process, aiming to ensure its effectiveness and efficiency.
• Actively review the processes for the management of third-party service providers, to ensure compliance with the Bank’s resilience expectations.
• Monitor and suggest enhancements of the relevant KRIs and leads the preparation of the risk reports for senior management.
• Contribute to the promotion of a culture of operational resilience across the Bank by supporting training initiatives, awareness campaigns and knowledge sharing.

What you need to have

• A Bachelor’s degree in Risk Management, Information Security, Information Technology, Engineering, Business Administration or in any other related field of study.
• A Master’s degree in any of the abovementioned fields of study is desirable.
• At least seven (7) years of professional experience in ICT Risk Management, Digital Operational Resilience, Business Continuity, or Information Security.
• Proven experience in a control function or an oversight role, is desired.
• Working knowledge of DORA and/or NIS2.
• Relevant certifications such as CRISC, CISSP, CISM, CISA, CBCP, ISO 22301, will be considered a plus.
• Solid communication and stakeholder management skills.
• Analytical and critical thinking skills, with attention to detail.
• Complex problem-solving and decision-making skills.
• Proficiency in the use of MS Office (Word, Excel, PowerPoint).
• Excellent command of the English language (both written and spoken).