About this role
Job Purpose *
• To provide comprehensive operational governance, risk management, audit tracking, business continuity coordination and management reporting support across Group Technology (GT).
• The role ensures timely compilation, monitoring and reporting of audit findings, Control Issue Management (CIM), Control Environment Testing (CET), Key Risk Indicators (KRI), Third-Party Risk Management (TPRM), Vulnerability Assessment and Penetration Testing (VAPT), and Business Continuity Management (BCM) matters to support operational efficiency and regulatory compliance across GT units.
Job Description *
A. Governance & Management Reporting
• Consolidate and finalise monthly governance decks for management reporting i.e. MYMC, GTMC and TORCh.
• Maintain Operational Risk Management (ORM) and audit reporting on open control issues, findings, owners, remediation status and due dates.
• Compile patching, hardening, cyber assessment, TRAS and KRI updates for management forums.
B. Risk & Audit Issue Monitoring
• Perform fortnightly reviews of the CIM tracker and maintain due/near-due follow-up reports.
• Conduct periodic GRC data pulls for CET attestations and KRI monitoring, and issue follow-up status reports.
• Consolidate VAPT findings and remediation updates, and support monthly VAPT reporting provided by GT IT Security team.
• Track project advisory and non-advisory audit progress, advisory memo issuance and project completion.
• Monitor GCAD planner and Audit Dashboard status and prepare relevant management reporting.
C. Business Continuity Management & DCC Responsibilities
• Coordinate annual BIA and BCP submissions, DCC briefings, HOD sign-offs and submission to Group BCM.
• Compile quarterly BCP, TPRM/outsourcing and major incident inputs for the Group BCM/BCMSC scorecard.
• Maintain call-tree contacts, coordinate exercises and document observations and corrective actions.
• Coordinate OSH incident reporting.
Job Specification *
Qualifications
(Basic Degree/Diploma etc) Bachelor’s Degree in Computer Science / Information Technology or equivalent.
Professional Qualification and/or Regulatory, Licensing requirements -
Relevant Work Experience -
Key Dimension of Impact *
Non-financial
• Coverage across Group Technology divisions and business units.
• Monitoring of CIMs, CET attestations, KRI metrics and audit findings.
• Monthly and quarterly reporting for management reporting i.e. MYMC, GTMC and TORCh.
• End-to-end BCM coordination with GT units and Department Continuity Coordinators.
Financial
Indirect risk mitigation through timely remediation, regulatory compliance and business continuity planning, reducing exposure to penalties, audit non-compliance and operational disruption.
Required Competencies and Skills *
Competencies/Skills
(Essential to succeed in this job)
• Strong Microsoft Excel skills for consolidation, tracking and analysis, and PowerPoint skills for executive reporting.
• Excellent communication skills in English both verbal and written
• Able to adapt well to changing demands, multi-task effectively and work autonomously with a problem-solving and ownership of issues mindset
• Proven record of good teamwork and collaboration
Travel Requirements (if any)
Frequency
(Incl typical Destinations and Duration) Minimal to none; role is primarily office-based and supports internal operations.