Supervisor, IT Supervision (IT Audit Role)

ROLE PURPOSETo assist the Senior Supervisor of IT risk in planning, organising and supervising the risk of information technology (IT) through continuous surveillance of FIs in ensuring financial stability, and to address IT risk aspects of regulatory applications in order to facilitate appropriate and consistent compliance with supervisory strategy; the Financial Services Act 2013/Islamic Financial Services Act 2013; and all applicable Policy Standards. The Supervisor is also responsible to assess IT risk vulnerabilities within FIs through on-site and off-site supervision, and to initiate preventive and remedial actions in achieving the Bank’s strategic outcome of no unanticipated amber institutions.

PRINCIPAL ACCOUNTABILITIESAppraises the IT risk nature and IT health/condition of FIs, by undertaking IT risk assessment for effective supervision, to timely detect supervisory concerns and emerging risks, and effectively communicate any concerns together with the appropriate recommendations on supervisory measures to be undertaken. Also ensures that the agreed standards and deadlines are met, which allows all necessary supervisory documentations of FIs being assessed be duly completed and timely made available. Performs continuous off-site monitoring activities to facilitate detection of potential problems, risk exposures and emerging supervisory concerns pertaining to IT.

Ensures that FIs comply with the IT risk aspects of various regulations, rules and policies issued by BNM, and recommends remedial actions arising from concerns and/or breaches of compliance. Undertakes IT risk assessment of formal applications received from FIs, and provides the appropriate recommendations in a timely manner. Ensures assessment of applications is comprehensive, appropriate and consistent with applicable laws, regulations and all applicable Policy Standards, and decisions are to be in accordance with approved supervisory and governance framework of the Bank.

Assists in building strong collaboration internally and externally in obtaining and providing information necessary to facilitate continuous surveillance and effective supervision of IT risk. Assists in providing feedback/inputs/expertise to other departments in the Bank on policy developments, projects, etc. , whenever needed. Undertakes other ad-hoc assignments, when assigned. CRITICAL SUCCESS FACTORSKnowledge of Supervisory Risk-Based Framework (SuRF). Knowledge of IT risk management principles. Knowledge of legal and regulatory requirements. Timely identification of potential vulnerabilities and emerging IT risk of a number of FIs. Adequate supervisory resources including competent staff. Effective internal and external collaboration.

Ability to assessing issues, identifying remedial actions and presenting them clearly, concisely and effectively in a timely manner. Effectiveness of surveillance tools. QUALIFICATIONS & EXPERIENCEAcademic: A postgraduate/undergraduate degree or a professional qualification in information technology related disciplines, with primary focus on IT security and/or auditing. Alternatively, a postgraduate/undergraduate or a professional qualification in accounting; banking; finance; business studies; commerce; or risk management discipline, can also be given a careful consideration. Candidate must obtain 5 credits in Sijil Pelajaran Malaysia (SPM) for subjects including Bahasa Melayu, English and Mathematics. Experience:

3-5 years experience in IT security and/or auditing, within the context of the financial industry. ONLY SHORTLISTED CANDIDATES WILL BE NOTIFIED