Head Information Risk Management at 9Mobile

Manage the entire information risk universe covering IP/ IT security across all IT and mobile network nodes, value-added services (VAS), and other technical services.  Responsible for end-to-end information security (from front-line to backend/data centre), IT business continuity and operational risk oversight functions and ensure an acceptable risk profile, strict adherence to information risk standards and procedures; Liaise with internal audit, assurance / attest functions and other parts of the enterprise as part of the overall enterprise-wide risk management.   Provide relevant and timely information on key risk indicators (KRI) for effective risk oversight. Entrench a risk-conscious culture across the in-scope functions and throughout the organization.  A major objective of this role is to achieve and maintain an acceptable risk profile for the overall operating environment

ROLES AND RESPONSIBILITIES:

Strategic

• Develop and maintain the Information Risk Management (IRM) framework by proactively developing, refreshing and implementing an annual IRM program;
• Provide inputs to the formulation of the overall technology strategy, lead the strategic risk management vision for the dependent units and ensure delivery through the application of exceptional leadership skills, strong network of internal and external alliances and highly developed business skills;
• Establish credible risk governance, an integrated risk management mindset and an execution approach that appropriately prioritizes actions based on business impact;
• Responsible for ensuring that the overall risk profile of the in-scope functions is maintained within acceptable levels

Operational

• Accountable for ensuring that the relevant teams within in-scope functions are well-structured and equipped to address risk and that information risk management gets the right level of focus;
• Implement appropriate systems and processes that ensures that:
  
  • Information risks are proactively managed
  • Early detection and timely remediation when undesired events occur;                                                                                 

• Lead the development of risk policies, plans and procedures, and organizational structures that provide an acceptable level assurance;
• Build awareness of new and evolving risks across the in-scope functions and across the entire organisation;
• Lead the identification of key risk indicators (KRIs) for the in-scope functions based on up-to-date situational analysis and trends;
• Coordinate the activities of the IT Risk Council; Design, implement and own the Governance, Risk & Control (GRC) program for the in-scope functions;
• Responsible for managing the business continuity plans (BCP) for the IT function.  Ensure continuous and regular validation and testing of documented / approved BCP;
• Conduct continuous risk assessments & business impact analysis for new and existing solutions;
• Aggregate information to identify operational control weaknesses and build a risk management dashboard that is refreshed and published periodically;
• Deploy behavioral change management techniques to maintain risk awareness capabilities across groups within and outside the functions in scope;
• Collaborates with assurance providers to provide an accurate opinion on the operating environment;
• Carry out other activities as instructed by the Chief Product & Information Officer.