大手証券会社でのIT Risk and Control Supportの求人

IT Risk and Control (ITRC) delivers the overall technology governance and control framework to support technology operations. Objectives of the team are to:
・Define the overall System Risk Management Framework, and associated controls.
・Define and implement appropriate governance to ensure compliance to the System Risk Management Framework, and that the control framework / controls are robust.
・Maintain and monitor the Regional and Global Technology Control Environment for adherence to the Governance Framework.
・Facilitate the operation of appropriate controls to allow Technology to operate efficiently and effectively while ensuring requirements of Technology Management, Internal and External Audit, Regulatory Bodies, Compliance and Risk controls are met.
・Monitor and assist with remediation where controls are to be strengthened.
・Advise Technology management and staff on Governance, Risk, and Control best practices.
・Oversee the annual IT-portion of the SOX Audit (Japan has the heaviest involvement)
・Direct responses to the IT-portion of regulatory inquiries and inspections.
・Assist with Internal Audit reviews / audits.

The ITRC Japan team includes staff of various nationalities and we are actively looking at making the team more diverse.

＜Responsibilities＞
・Responsible for the IT Risk & Control operations within the Corporate Division of Our Company, which also includes global oversight of the controls operating globally.
・Support global IT policies & standards buildout and reviews, and monitor compliance of IT operations.
・Assist with writing IT Policies, Procedures, Standards, and Process Documents if required.
・Proactively review existing processes and procedures and make proposals for improvement.
・Support the controls testing, monitoring and assurance reviews of the controls defined within the IT Risk Control Library.
・Liaise with policy and standards owners globally to evaluate control testing results and if required, develop agreed remediation plans and manage the exception/action tracking.
・Seek to continually improve the maturity of control testing and assurance activities.
・Perform IT risk assessment to identify potential risks and develop mitigating controls.
・Coordinate internal and external audit / inspections, and technology related regulatory assessments.
・Monitor technology projects for adherence to governance policies and processes.
・Support other IT Risk and Control initiatives like Disaster Recovery Testing, Vendor Management, Management Reporting in accordance with mutual discussion and agreement with line manager, as necessary.
・Improve overall IT Risk & Control awareness among IT staff
・Assist with collating updates and metrics for the Governance Forums, both Global and Regional

＜Mandatory＞
・Minimum 3 years of relevant IT Risk & Control experience within Banking or Consulting firm or related environment in supporting IT Governance, IT General Controls, IT Security, Audit or Technology compliance framework.
・Experience in supporting IT Governance, IT General Control, IT Security, Audit or Technology compliance framework including demonstratable knowledge of actively managing risks and performing control testing either as an Technology control owner or within an IT risk, audit or information security team.
・Experience in Technolgy Risk Assessment.
・Experience working as a part of or with global teams.
・Experience in Technology Incident, Problem, Release and Change Management process preferably using ITIL model.
・Capability to understand and communicate control requirements to a stakeholders based globally.
・Conversational level Japanese (Spoken - Mandatory / Written - Preferred) and Business Level English - Communication with international regions will be in English.
・Good communication skills and experience in liaising across multiple business and technology groups.
・Organized, able to evaluate and manage priorities, able to handle an ever-changing environment.
・Proactive and strong sense of ownership to see tasks through completion.
・Able to think laterally and take a pragmatic approach, when necessary, to issue resolution.
・Graduate Degree, Information Technology degree or relevant qualification.
・Excel (Macro), Power Point, GRC tools, ServiceNow.

＜Preferred＞
・Experience in Technology Incident, Problem, Release and Change Management process preferably using ITIL model.
・Experience in Agile SDLC and Cloud Governance
・CISA, CISM, CRISC, CISSP, or other IT governance, risk, or audit or security professional qualification.