Head of Information Risk Management

KEY RESPONSIBILITIES• Organize and keep enhancing the information risk management framework, policies, procedures and processes; to ensure that regulatory are put into practice• Perform evaluations of the design and effectiveness of overall control measures for information technology and the controls of IT application; control the movement of information, data for both within VPB SMBC FC and to outside• Perform and validate Information Risk Assessment on Vendors, participate in due diligence on vendor selection process• Security considerations include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, data confidentiality and integrity• Identify potential risk and provide guidance of risk mitigation and acceptance in information design gaps in existing and proposed architectures and recommend implement changes or enhancements• Manage incidents, response & handling in the event of information risk at VPB SMBC FC• Coordinate with relevant units to define and set up the matrix of access rights for all information systems, database of VPB SMBC FC.• Train and monitor the deployment of communication methods to enhance information risk awareness across VPB SMBC FC• Other tasks assigned by Center Director.