Senior Information Risk Management Specialist

Support to compose and update the information risk management framework, policies, procedures and processes to ensure that regulatory are put into practice.

Deploy communication methods to enhance information risk awareness across VPB SMBC FC.

Support to evaluate of the design and effectiveness of overall control measures for information technology and the controls of IT application/ the movement of information, data for both within VPB SMBC FC and to outside.

Support to validate Information Risk Assessment on Vendors in due diligence on vendor selection process.

Coordinate with relevant units in supporting to define and set up the matrix of access rights for all information systems, database of VPB SMBC FC.

Other tasks assigned by Department Head.

University degree of University graduation, major: Economics/Finance, Business Administration, IT, Audit

Minimum 2 years solid experience in Information Risk and Security Management

Prefer having experience in audit and compliance in information risk

Understanding regulatory related to IT security is a plus

Proficient in English, spoken and written

Incident and problem Management

Drive risk and control initiatives

Having mindset on process quality improvement.