Senior Control Self-Assessment

Job Title : Senior Control Self-Assessment Branch /Dept: Information Technology Department Reporting to: Manager IT Assurance and Intelligence Main Role (Overall Accountability) The Control Self Assessor is responsible to identify, plan, execute and report on specialized Information Technology related reviews involving a broad range of information technology and operational functions within the Bank to evaluate and improve the effectiveness of governance, risk management, internal control, and organizational decision making. Overall Responsibility: 1. Plan, conduct and manage IT Control assessments and RCSA assessments within Information Technology department to ensure the effectiveness of IT controls. 2. Make necessary recommendations and point of improvements adding value to enhance general IT-process/operations/functions. Principal Accountabilities Specific Responsibilities: Understand, analyse and evaluate processes, risks and controls within IT department. Executes the structured risk assessment process (RCSAs) for systems, processes, and projects Maintains the cyber risk register within the GRC tool, ensuring data quality and completeness. Tracks the status of risk treatment plans (mitigation actions and risk acceptances/exceptions), following up with owners as needed. Supports the preparation of executive risk reporting by analysing risk data, trends, and KPIs. Executes control testing activities as part of 1.5 LOD assurance plan Manages the logistics of Control Library and attestations process, coordinating with 1LOD control owners to ensure timely submissions Conducts QA checks on control activities by 1LOD Assists in the development and implementation of Continuous Control Monitoring (CCM) capabilities, automating evidence collection and testing. To have good understanding of IT risks, standards, controls and be ready to help all departments to spread a risk aware culture Prepare and maintain GRC dashboards to ensure complete management visibility Key Interactions Individual / Entity IT Section Heads All IT Staff in the Bank Vendors & External Parties Purpose Follow-up and Assess Risks IT Reviews Related Personnel Specifications Internal and External Audit Involvements, Other Contribution Good academic background with extensive domain knowledge of IT Review/assessments within bank area. Minimum 8 years of experience in the field of information technology with reputed organizations having knowledge and experience in Governance/Compliance/Risk or Information Security/IT (as applicable). The candidate should also have thorough knowledge of the following: • In-depth experience in Governance/Compliance/Risk. • Planning, implementation and administration of self-assessment within • IT department through the use of controls, procedures, measurements and strategies. • High-level knowledge of current technology in the industry. • High attention to detail, and strategic reasoning skills. • Evaluation Skills, Critical thinking and Analytical Skills. • Good management capabilities with abilities to lead a team. • Good communication, presentation skills with good command of written English. • Good Interpersonal relations with pleasing personality. • Required: COBIT Certification • Preferred: CIA, ISO27001 LA, CISM, CISSP or other related certifications • Preferred: Experience in using Analytical tools: ACL, SQL Scripting etc and GRC Tools.