16 Jun 2025
Expert, Technology and Digital Risk Management
Category: Risk Management Division
Job Type:
Facility: Risk Management
Job Purpose
1. Manage and monitor TDRM to ensure technology and digital risks are managed and mitigated within risk limit
2. Develop, propose and implement TDRM programs and activities to manage technology and digital risks
3. Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies, risk taxonomies and respective mitigation controls
4. Provide subject matter advices related to Technology và Digital innovation and implementation
5. Develop TDRM capabilities and improve bankwide TDRM awareness and culture
Key Accountabilities (1)
Manage and monitor TDRM
- Develop, propose and implement TDRM programs and activities to manage technology and digital risks
- Provide subject matter advices and design TDRM policies, standards, regulations, procedures and methodologies
- Develop technology and digital risk taxonomies and respective mitigation controls
- identify data collection requirements for TDRM data, develop TDRM data structure, model, dashboard and KRI to monitor technology and digital risks and forecast risk trends; and propose early actions to ensure technology and digital risks are managed and mitigated within acceptable level
Key Accountabilities (2)
Provide subject matter advices related to Technology và Digital innovation and implementation
- Evaluate technology strategy, business process, control automation and governance and compliance
- Evaluate the effectiveness of controls and oversee and oversight the design and implementation of controls.
- Support in investigation of cyber digital risk incidents and recommend solution/action to mitigate and manage risks
Key Accountabilities (3)
Develop TDRM capabilities and improve bankwide TDRM awareness and culture
- Conduct/ support training on subject matters to TDRM team members to improve team's capabilities and to fulfil the function's job requirements.
- Support other units to conduct training and communication to improve bank-wide TDRM awareness and culture.
Success Profile - Qualification and Experiences
Experience:
- At least 06 years of relevant work experience
- Extensive knowlegde of technology and digital risks, information systems, information security, information system review
- Extensive knowledge of banking information system landscape and banking business operation
- Understanding the TCB information systems and business operation
- Having a university degree or higher on Information Technology, Information System, Information Security or equivalent
- English: TOEIC 500 or equivalent
- Having professional certification on IT risk, information security, Information system review