Risk and Information Security Officer

• Supports the board of directors in developing the risk appetite and translating it into a risk limits structure for BOF.
• Proposes enhancements to risk management policies, guidelines, and procedures (PGPs) to ensure robust risk management capabilities.
• Documents, updates, and disseminates risk management-related PGPs, ensuring compliance with relevant laws and standards.
• Stays updated on risk management news and best practices to revise PGPs promptly.
• Participates in the review of IT outsourcing contracts and system development to ensure adequate controls and security requirements.
• Conducts risk assessments as required, especially for new products, services, or systems.
• Documents and disseminates information security policies, initiating updates as needed.
• Coordinates company-wide information security training programs to ensure compliance with regulations.
• Stays updated on security-related news and best practices to revise BOF's policies accordingly.
• Updates the information security program to reflect changes in operations, systems, and threats.
• Handles information security incidents and suspected breaches, coordinating responses with GDS.
• Conducts periodic reviews of access rights to applications and networks.
• Attends ITSC meetings to report and follow up on information security incidents and concerns.
• Performs other duties related to risk management and information security as assigned.

Qualifications:

• 10 years of Banking experience
• Excellent writing skills
• Background on IT.