Role and Responsibilities / หน้าที่ความรับผิดชอบ
- Design and develop key tools and processes of operational risk management for cyber and IT risk management including coordinate to apply them to business units by balancing risks with business targets
- Collaborate with business units to identify, analyze and assess impacts from key cyber threat and IT operational risk factors
- Cooperate with business units to monitor, review and control cyber and IT operational risks to satisfy acceptable risk appetites
- Prepare risk positions in cyber and IT operational risk management and report to the management
- Establish policies, guidelines, procedures and related manuals in cyber threat and IT operational risk management
- Communicate, coordinate and set up training sessions for enhancing knowledge as well as aligning understanding and awareness of all parties in the company about significance of policies, guidelines and shared responsibilities in risk management
Qualifications / คุณสมบัติ
- Bachelor or Master in Information Technology, IT Management, Computer Science, Computer Engineering or related fields
- At least 3-year working experience in Risk Management and/or IT management and/or IT security
- Well verbal and written communication skills in both English and Thai
- Comfortable with basic productivity and office suites
- Knowledgeable and experienced in banking products, financial services, marketing or related business including regulatory impacts as well as risks in banking industry and services
- Analytical and critical skills with a keen eye for detail
- Proven abilities in managing, planning, problem-solving, positively negotiation and cross-team collaboration
Specific knowledge and skill / ความรู้เฉพาะตำแหน่ง
- Knowledgeable in adoption trend of new technologies in banking environment; particular in risk management, marketing, products & services, customer behaviors as well as related regulations and legal notices for enhancing business growth and competitiveness
- Candidates with related certificates or experience such as CRISC, CISA, CISM would be highly considered
