Role Introduction
Reports to: IT Risk Management – Senior Lead
The role of a senior lead in IT Risk management is to Own, develop, maintain and assess the end to end process of IT risk management in the organisation. The role provides hands-on on assessing risks, advising mitigation steps, reporting and ensure that the risk posture is better with low exposure to risks. Must have excellent quantitative and analytical skills, along with the ability to apply those skills across a variety of business processes
Key Responsibilities
- Supporting overall risk management process for the organisation, which includes an analysis of the financial impact on the company when risks occur
- Perform risk assessment: Analysing current risks and identifying potential risks that are affecting the company
- Provide inputs for risk evaluation:
- Supporting Risk management tool
- Input risks in the risk management tool
- Support and work with extended team for risk reviews
- Support on audit and followup remediation items
- Follow-up with risk owners on risk status
- Update risk register
Requirements
- Relevant tertiary education.
- 6 years’ IT experience, and 3+ years of IT experience in security area
- Certifications – CRISC or CISSP preferred
- Familiar with IT Risk management tools
- Team player
- Capturing, understanding, and explaining the risk to stakeholders across the organization
- Risk report tailoring to the relevant audience
- Excellent verbal and written communication skills across internal and external organizations.
- Support development and management of IT risk management process
- Promote Risk management within IT and BU
- Provide support to all team members
- Strong problem solving and analytical skills
Personal & Application Information
Cathay Pacific is an Equal Opportunities Employer. Personal data provided by job applicants will be used strictly in accordance with our personal data policy and for recruitment purposes only. Candidates not notified within eight weeks may consider their application unsuccessful. All related information will be kept in our file for up to 24 months. A copy of our Personal Information Collection Statement will be provided upon request by contacting our Data Protection Officer.
