Senior Officer, Technology and Digital Risk Management (40000876)

1. Manage and monitor TDRM to ensure technology and digital risks are managed and mitigated within risk limit
2. Implement and monitor TDRM programs and activities to manage technology and digital risks
3. Develop TDRM policies, standards, regulations, procedures and methodologies, risk taxonomies and respective mitigation controls
4. Support and participate in Technology và Digital innovation and implementation
5. Improve bankwide TDRM awareness and culture

Manage and monitor TDRM
- Implement and monitor TDRM programs and activities to manage technology and digital risks
- Develop TDRM policies, standards, regulations, procedures and methodologies
- Develop technology and digital risk taxonomies and respective mitigation controls
- Collect, consolidate, analyze and manage TDRM data,
- Develop TDRM dashboard and KRI to monitor technology and digital risks and forecast risk trends; and propose early actions to ensure technology and digital risks are managed and mitigated within acceptable level

Support and participate in Technology và Digital innovation and implementation
- Evaluate technology strategy, business process, control automation and governance and compliance
- Evaluate the effectiveness of controls and oversee and oversight the design and implementation of controls.
- Support in investigation of cyber digital risk incidents and recommend solution/action to mitigate and manage risks

Improve bankwide TDRM awareness and culture
- Support other units to conduct training and communication to improve bank-wide TDRM awareness and culture.

Director, TDRM

Experts/consultant/audit units, SBV

Experience:
- At least 05 years of relevant work experience
Expertise:
- Understanding of technology and digital risks, information systems, information security, information system review
- Understanding of banking information system landscape and banking business operation
- Understanding of TCB information systems and business operation
Qualifications:
- Having a university degree or higher on Information Technology, Information System, Information Security or equivalent
- English: TOEIC 450 or equivalent