Executive (Risk Management)

KEY OUTPUTS:
I. Enterprise Risk Management:
1. Support in promoting and implementing the Company’s Enterprise Risk Management (ERM) Framework including: Risk Appetite framework, Capital Management plan, Stress testing, Sensitivity Analysis, KRI/KCI assessment, Own Risk and Solvency Assessment (ORSA) process;
2. Support in preparing and maintaining Company’s Risk Register, Key Business Risk profile, Risk Map;
3. Support in providing advices to Risk Owners on risk treatments with follow-up risk mitigating actions;
4. Support in promoting Risk Culture via: training, coaching, knowledge sharing to other divisions and risk owners;
5. Provide Company’s Risk reports to Senior Management Team, Member of Council and Regional Holding Company with timely and accurate information for business decision-making.
6. Monitor and escalate emerging risks and urgent issues leading to Company’s potential risk exposure.
7. Secretary for ERM Committee meeting
II. Information Security:
1. Support to develop and maintain Information Security Control Framework, including the annual Information Security key activities and/or initiatives;
2. Facilitate the liaison among related divisions/branches to remediate information security deficiencies and mitigating information risks at all areas of operation;
3. Promote information security awareness and practice via trainings and campaigns;
4. Secretary for IS Committee meeting
III. Business Continuity Management:
1. Support in developing and maintaining Business Continuity Management Framework;
2. Support in developing and implementing annual BCP key activities, including business impact analysis, scenarios response plan and drill testing;
3. Liaise with Incident Response Team (IRT) and Functional Response Team (FRT) in case of emergencies or incidents to ensure the continuity of business and operation
4. Secretary for BCP Committee meeting
IV. Cyber Security:
1. Support to develop the Cybersecurity Strategy and Roadmap for the Company; Roadmap/Action Plans and Initiatives for Cybersecurity of the Company
2. Co-operate with relevant departments to derive & maintain a holistic cybersecurity incident response plan;
3. Conduct training and enhance awareness on Cybersecurity to all staff

- Premium - 15 days per year - Annual Trip