Collect information and review documentation to ensure that risk scenarios are identified and evaluated.
Identify legal, regulatory and contractual requirements and organizational policies and standards related to information systems to determine their potential impact on the business objectives.
Perform monthly/quarterly submissions and annual review on Bank/BNM Key Risk Indicators (KRI), Risk Control Self Assessments (RCSA), Compliance Self-Assessment Review (SSAR), Compliance Matrix (CMAX), Cyber Resilience Maturity Assessment (CRMA) and Management of Customer Information and Permitted Disclosures (MCIPD).
Coordinate submissions on Technology Risk Dashboard on a monthly basis to Technology Risk Management team and send all Risk & Compliance communications to Technology Staff on an ad hoc basis.
Collect and validate data that measure key risk indicators (KRIs) to monitor and communicate their status to relev...