About Security Bank We are the Philippines' largest independent bank, having won countless awards over the years including the most prestigious industry award in both 2015 and 2016 the Bank of the Year Philippines by The Banker.
We're changing how people bank. From the moment customers enter our branches to their experience online, we make them feel valued and empowered.
Now, with more than 300 branches spanning the country, BetterBanking has become the gold standard in improving the banking lives of millions of Filipinos.
But we're far from done. In our constant pursuit of excellence and improvement, we create teams that support our business and each other.
JOB SUMMARY Assists the IT Risk Head to ensure that IT Risk Management process is aligned with the corporate plans, strategies and supports the objectives of the Bank and its Subsidiaries.
Assists the IT Risk Head to ensure that all technology risks of the Bank and its subsidiaries will undergo risk management process.
DUTIES AND RESPONSIBILITIES Monitors residual risks and implemented controls based on incidents and audit findings collected from various control units to check the effectiveness of the implemented controls.
Conducts process and control improvements based on the incidents and audit findings collected from control units to ensure controls are effective and impact of risks are at a minimum.
Creates, modifies, and propagates enterprise wide IT risk awareness program and materials based on the current and upcoming threats to IT in general to ensure that the Bank and its subsidiaries are aware of those threats to protect the Bank and its information assets.
Drives, coordinates and monitors the progress of initiatives / projects, remediation of audit findings or control weaknesses based from audit findings, gap analysis, result of risk assessment, incidents to minimize the impact of risk and threats to technology of the Bank and its subsidiaries.
Submits required reports for ROC, OPR and other reporting bodies based n the IT Risk reporting requirements of the Bank and its subsidiaries to keep the Senior Management and the Board updated on the reports critical about technology risk.
Creates and ammends the IT Risk Framework and other related documentations based on the need of the Bank and its subsidiaries to ensure the documents and framework are aligned to the regulatory requirements of the BSP and other regulators.
Identifies risks using the appropriate risk assessment tools as dictated by the framework to minimize the risk impact to the Bank and its subsidiaries.
Identifies the needed controls based on the risk assessment tools to apply appropriate risk treatment plan. Understanding and Application of Compliance and Regulatory Guidelines Conducts gap analysis on current documentations and implementations against new or updated regulatory circulars or laws that are applicable to the Bank and its subsidiaries to ensure continuous compliance to BSP and other regulatory bodies.
JOB QUALIFICATIONS Bachelor's Degree in Computer / Telecommunication, Computer Science / Information Technology Must have at least 5 years of experience in IT risk or IT audit Knowledge of PCI-
DSS, different domains of IT, COBIT Working skills on different IT domains, ISO27001, ITIL, and COBIT Ability to communicate effectively with all levels of the organization and external parties.
Keen to details. Highly analytical