Risk and Compliance Manager - Bangsar South, Malaysia - HWGZ Recruitment Services

Siti Tan

Posted by:

Siti Tan

beBee Recruiter


Description

Company Overview:

We are a prominent managed services provider specializing in integrated solutions for capital markets, network infrastructure, and beyond. With our inception dating back to 2000, we've ascended to become a leading provider in the Asia-Pacific region. Our commitment lies in empowering capital market entities with cutting-edge solutions, fostering growth, and driving operational efficiency.


Key Responsibilities:


Enterprise Risk Management (ERM) Policy and Framework Development:

  • Create, implement, and oversee compliance and risk management policies and frameworks to enact effective strategies.
  • Establish a sustainable ERM Policies and Framework alongside a Risk Rating Matrix for the identification, assessment, evaluation, measurement, and monitoring of critical risks.
  • Devise strategies to mitigate risks and ensure alignment with relevant laws and regulations.
  • Foster a culture of risk awareness and compliance, seamlessly integrating risk management into the organization's culture, operations, and decisionmaking processes.
  • Review and enhance Standard Operating Procedures to align with compliance and risk parameters.

Risk Identification:

  • Conduct thorough risk assessments to identify potential threats and vulnerabilities impacting various facets of the organization, including business, operations, finances, technology, human resources, and reputation.
  • Analyze both internal and external factors influencing the organization's objectives.

Risk Assessment:

  • Evaluate the likelihood and potential impact of identified risks.
  • Prioritize risks based on severity and potential consequences.

Risk Mitigation Strategies:

  • Develop and execute risk mitigation plans to minimize the impact of identified risks.
  • Collaborate with relevant departments to establish effective control measures.

Incident Reporting:

  • Supervise and manage the generation of incident reports.
  • Ensure the timely and accurate reporting of incidents, coordinating appropriate responses.


Compliance Management:


  • Monitor and enforce compliance with standard operating procedures across the operations team.
  • Collaborate closely with teams to address any deviations from established procedures.

Service Level Agreement (SLA) Monitoring:

  • Establish and uphold service level agreements for critical operational processes.
  • Monitor the company's adherence to service levels, addressing any deviations promptly.
  • Reporting to Management and Risk Management Committee:
  • Oversee quarterly reporting to management.
  • Prepare and deliver risk assessments to the Group's Risk Management Committee.

Customer Service Level Reporting:

  • Oversee periodic reporting of service level performance to customers.
  • Ensure accurate and timely communication of service level achievements and improvements.
  • License


Compliance Management:


  • Ensure compliance with all matters related to licenses.

Cybersecurity Threat Reporting:

  • Supervise periodic reporting of cybersecurity threats from the cybersecurity team.
  • Collaborate closely with the cybersecurity team to ensure swift assessments and address potential cyber threats.

IT Risk Policies and Regulations:

  • Oversee compliance with IT risk policies and regulations pertinent to the organization's business.
  • Collaborate with the IT team to ensure adherence to established IT risk management standards.

ISO Certification Compliance:

  • Manage the Group's compliance with ISO certifications.
  • Facilitate the renewal process for ISO certifications, ensuring ongoing adherence to ISO standards.
  • Insurance Management:
  • Collaborate with the procurement manager to engage with insurance providers for appropriate risk coverage.
  • Manage insurance policies and claims processes.

Monitoring and Reporting:

  • Regularly monitor and evaluate the effectiveness of risk mitigation measures.
  • Prepare and present comprehensive reports to senior management, stakeholders, and relevant committees.

Crisis Management:

  • Develop and implement crisis management plans to respond to and recover from unforeseen events, including business continuity plans.
  • Coordinate with relevant teams during crisis situations to minimize impact.

Training and Education:

  • Conduct training sessions to educate employees on risk management principles, incident reporting procedures, and standard operating procedures.
  • Cultivate a riskaware culture within the organization.

Job Requirements:


  • Bachelor's degree in information technology, computer science, or a related field (Master's degree preferred).
  • 8 years of experience in risk management, with IT environment experience being advantageous.
  • Strong understanding of IT compliance standards and frameworks.
  • Excellent communication and interpersonal skills.
  • Ability to prioritize tasks and manage time effectively.
  • Strong problemsolving skills and attention to detail.

Salary:
Up to RM11,000.00 per month


Schedule:

  • Day shift

More jobs from HWGZ Recruitment Services