Position Objective

To ensure the development and implementation of ICT Risk management policies, procedures, and guidelines in line with regulatory requirements and industry best practices.

To ensure compliance with information security policies, with any non-compliance properly documented and addressed through corrective and preventive measures.

Qualifications, Skills & Experience

• Bachelor’s degree in Banking, Economics, Commerce, Business Administration (Accounting/Finance), Risk Management, Actuarial Science, Insurance, Statistics, or equivalent.
• Minimum 10 years of relevant experience in operational risk / ICT risk management in the banking/financial sector.
• Strong leadership and people management skills.
• In-depth knowledge of risk systems, industry regulations, and operational risk principles.
• Excellent analytical, problem-solving, communication, and interpersonal skills.
• Proficiency in risk assessment methodologies and tools.
• Proven experience in developing and implementing risk management frameworks.
• Strong organizational and time-management abilities.
• Experience in the financial industry is preferred.

Personal Attributes & Behavioural Competencies

• Embodies TCB core values
• Ability to prioritize, meet deadlines, and deliver projects across the business
• Sound judgment, common sense, and good humor
• Strong business acumen with a results-oriented and self-driven mindset
• Ability to build effective relationships with stakeholders
• Effective data analysis and high-quality reporting skills

• Advise on information security-related risks in operational practices; conduct thorough risk assessments and vulnerability analysis to keep ICT systems and data secure and compliant.
• Collaborate with ICT teams to evaluate new technologies, systems, and applications for potential risks and vulnerabilities.
• Deliver training and awareness programs on ICT risk management and security best practices to all employees.
• Perform user access reviews on IT systems (second line of defense).
• Verify that security solutions are implemented in accordance with TCB policies.
• Support daily identification and management of ICT and operational risks as part of a team.
• Assist in reviewing and investigating reported IT incidents and maintain the incident log.
• Ensure policies are effectively implemented, new regulations communicated, and provide quality assurance on control design and monitoring plans.
• Coordinate, analyze, and consolidate risk and loss reporting to Management.
• Provide periodic reports on the status of Information Security operationalization.
• Design and implement control measures and monitoring plans for risks impacting the bank’s objectives.
• Ensure adherence to the risk management framework (identification, control, monitoring, reporting).
• Drive actions to mitigate, reduce, or contain identified risks; coordinate periodic self-assessment and monitoring of ICT and operational risks.
• Assess risks associated with new/changed products, services, and business strategies.
• Review control quality, including validation of Key Risk Indicators (second line of defense).
• Develop, update, and manage the Bank’s Risk Register.

• Strong leadership and people management skills
• Excellent analytical, problem-solving, communication, and interpersonal skills
• Proficiency in risk assessment methodologies and tools
• Strong organizational and time-management abilities
• Ability to prioritize, meet deadlines, and deliver projects across the business
• Sound judgment, common sense, and good humor
• Strong business acumen with a results-oriented and self-driven mindset
• Ability to build effective relationships with stakeholders
• Effective data analysis and high-quality reporting skills

• Bachelor’s degree in Banking, Economics, Commerce, Business Administration (Accounting/Finance), Risk Management, Actuarial Science, Insurance, Statistics, or equivalent
• Minimum 10 years of relevant experience in operational risk / ICT risk management in the banking/financial sector
• In-depth knowledge of risk systems, industry regulations, and operational risk principles
• Proven experience in developing and implementing risk management frameworks
• Experience in the financial industry is preferred