Vice President, IT Risk Management Lead

at  MUFG Bank Ltd

ABOUT THE ROLE:

The IT Risk Management Department Lead for Australia & New Zealand is responsible for identifying, assessing, and managing the IT information risks faced by the organisation. This role is pivotal in protecting the company from potential threats and uncertainties related to information security.
The role will partner with the Asia Systems Office Oceania (ASOO) management and regional Asia Systems Office (ASO) leadership to lead the local IRMD (IT Risk Management Department) team and act as the Technology Information Security Officer (TISO) for Oceania.

WHAT YOU’LL BE DOING:

• Identify, assess, and prioritise potential IT risks to the organisation.
• Support the development, review and implementation of appropriate IT risk management strategies and processes, in conjunction with the regional IRMD teams.
• Own the development, alignment and integration of the local IT Information Security Risk Management Framework, Risk Appetite Statements, and Risk Policies.
• Work with internal and external audit teams to ensure controls remain effective, and to drive closure of any findings that may eventuate.
• Ensure appropriate RCSA (Risk Control Self-Assessment) processes are in place, that they are appropriate, and that they are actioned accordingly.
• Communicate, enforce and oversee compliance to IT related policies, standards and processes across the organisation.
• Ensure compliance with laws and regulations related to IT and keep the region up to date with local Oceania regulatory developments / requirements including but not limited to CPS234.
• Work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
• Provide regular profiling and reporting on IT risks, issues, and controls to the Oceania business stakeholders and regional IT leaders.
• Develop and maintain relationships with key business units within the organisation and key external stakeholders.
• Own and drive the Access Control team in Oceania as part of the regional function team.
• Be the representative for the regional IRMD team locally in Oceania.
• Increase the awareness and importance of IT Risk across the region through effective communication and appropriate education strategies.