Director, IT Risk and Compliance Management

Job Description

Job Purpose

The Job Holder:

- Ensure strategic objectives of the bank are not jeopardized by IT risks

- Ensure compliance in the field of technology with regulations of State agencies, regulations of the Bank and international standards on technology applied at the Bank

Key Accountabilities (1)

1. Work management and administration:

1.1. Responsibilities for management and administration of department work:

- Develop and implement strategies and action plans to ensure that the department properly and fully implements risk management and technology compliance functions

- Ensure functional groups in the department comply with the Bank's policies and regulations, meeting commitments on service quality.

- Research, propose and implement improvements in departmental operations.

- Report the performance of the department's work periodically or when required.

1.2. Responsibilities in risk management and technology compliance:

- Implement the management of technology and operational risks in the Industrial Division: from the identification process to the coordination with the departments to perform the assessment, to develop treatment plans and preventive solutions to minimize risks and losses for the bank and customers.

- Establish and implement good practices, standards, governance processes, and advanced tools in technology risk management.

- Organize the development, implementation and operation of technology risk management tools and other supporting tools.

- Organize the implementation of technology compliance management in the Bank: assess and control the compliance with technology policies, regulations, processes and standards; identify and monitor the process of remedial and prevent non-compliance.

- The focal point to organize the assessment of the current status and implementation to ensure compliance with the requirements of the State management agencies in the field of technology; Organize reports, respond to requests/dispatches of State management agencies and external units in the field of technology of the Bank.

- Implement communication to raise awareness and compliance of employees of the Industrial Division with regulations and technological processes of state

- Vendor management: Establish a mechanism to monitor, review, and manage the IT service provider's capacity, performance, TvàC compliance. Be contact point to develop set of standards with vendor, e.g. IT contract, license agreement. Develop relationship và cooperation opportunity with IT strategic partners and potential partners

Key Accountabilities (2)

PEOPLE MANAGEMENT

- Oversee human resources planning and execution (headcount & costs) of their function/ sub- function

- Attract, onboard and retain the right talents for a high- performing team

- Establish and communicate sub- function/ function and individual KRAs/ KPIs, goals, action plan, expectations and results to reporting line

- Manage sub- function/ function performance & provide feedback regularly (following the annual performance management cycle)

- Define team’s capability requirements and enable team member’s professional and personal development through capability assessment, training, coaching & feedback, mentoring, etc.

- Motivate and recognize team members’ contributions towards the team’s shared goals

- Responsible for developing talents within the function/ sub- function

- Act as a role model and promote corporate culture at function/ sub- function level

- Understand & communicate relevant HR offerings to team members.