Assistant Manager (Data Governance & IT Risk Management – Commercial Bank Colombo

About the job

Company Description:

With an enduring vision of being the most technologically advanced, innovative and customer friendly financial organization, we, the Most Awarded Bank in Sri Lanka, continue to progress steadily while being the first Sri Lankan bank to be listed amongst the Top 1000 Banks in the World. Our unparalleled record of success is supported by an unmatched suite of digital offerings and superior standards in service, stability and performance. We are poised to ascend to even greater heights in the near future.

Role Description:

Responsible for assisting the implementation and maintenance of the bank's IT Risk Management Framework, ensuring alignment with relevant regulatory guidelines and standards, including data governance and privacy frameworks in accordance with the Personal Data Protection Act. 

• Monitoring data transfer: Tracking and analyzing data movement to identify potential breaches. 
• Implementing security measures: Setting up and maintaining tools and technologies related IT Risk Management including Data Loss Prevention (DLP) 
• Risk assessment: Identifying, analyzing and mitigating risks associated with    information technology system including potential threats to data 
• Incident response: Review and responding to DLP alerts and incidents. 
• Analyzing data: Using analytical skills to identify patterns, trends, and potential risks. 
• Reporting and communication: Providing reports and recommendations to improve DLP strategies and Information systems. 
• Conduct Training: Conduct awareness programs to foster a culture of data governance and security among all bank users. 
• Staying current with industry trends: Keeping up with the latest IT Risks and DLP technologies, best practices, and regulatory changes. 
• Coordinate with cross-functional teams to align IT Risks and Data Governance projects with business objectives 
• Identify opportunities for continuous improvement in IT Risk Management and Data Governance processes.

Qualifications:

Any one of the following qualifications is required: 

• Bachelor's Degree in Information Security 
• Bachelor's Degree in Computer Science/ Information Technology specializing in Information Security or Data Science 
• (ISC)2 Systems Security Certified Practitioner (SSCP) 
• ISACA Certified in Risk and Information Systems Control (CRISC) 
• ISACA Certified Information Security Manager (CISM), ISACA Certified Data Privacy Solutions Engineer (CDPSE). Holding CIPP, CDPP and DABF would be an added advantage. 
• Minimum Seven (07) years' experience in Banking & Finance including Three (03) years' experience in IT security or data protection. Working experience at the Security Operations Center will be an added advantage. 
• Familiarity with IT Risk Management tools, technologies, and DLP / data security principles. Ability to analyse data, identify patterns, incidents and make informed decisions. 
• Ability to explain technical information to both technical and non-technical audiences.