Senior Manager – Technology Risk Management

About the role

The bank is seeking a senior technology risk professional to strengthen its technology risk and cybersecurity governance framework. The role involves overseeing risk assessments, control reviews, and regulatory compliance across critical digital assets.

Key responsibilities

• Lead technology and information security risk assessments for systems, infrastructure, applications and digital platforms.
• Review and challenge IT controls, security practices, user access management and remediation activities.
• Evaluate technology‑related risks for new products, projects, system implementations and infrastructure upgrades, providing independent clearance and go‑live recommendations.
• Monitor findings from penetration testing, vulnerability assessments, SIEM reviews, incident management processes and security events.
• Assess third‑party service providers and outsourced technology services from a risk perspective.
• Participate in disaster recovery and business continuity exercises, preparing risk dashboards, management reports and executive summaries for governance forums.

Required profile

• Minimum 7 years’ experience in technology risk management, information security or related fields, with at least 3 years in a managerial or specialist role.
• Experience in banking, financial services or other highly regulated environments.
• Degree in IT, cybersecurity, computer science or related discipline; professional certifications such as CISA, CISM, CISSP, GIAC are highly desirable.
• Strong understanding of information security principles, regulatory requirements and risk assessment methodologies.

Required skills

• Network security and application security expertise.
• IT controls assessment and vulnerability management.
• Incident management and penetration testing.
• SIEM analysis and cybersecurity framework knowledge.
• Risk assessment methodologies and regulatory compliance.