Risk manager

Job Description

Risk Manager

GENERAL PURPOSE

To oversee all risks relating to Trust Capital TC information security, including oversight of information security risk assessments.

MAIN JOB TASKS & RESPONSIBILITIES

1. Overall ownership of Trust Capital TC information risk policy

2. Champion for information risk on the Board of Directors and provides written advice to the board on the content of Trust Capital TC Solutions’ Statement of Applicability in regard to information risk.

3. Shall receive training as necessary to ensure they remain effective in their role.

4. Oversee the development of an Information Risk Policy. This should include a strategy for implementing the policy within the existing standards and methods.

5. Take ownership of the assessment processes for information risk, including prioritization of risks and review of the annual information risk assessment to support and inform the Statement of Applicability.

6. Implements and leads the risk assessment and management processes within Trust

Capital TC and advises the Board of Directors on the effectiveness of information risk management across Trust Capital TC

7. Ensure that the Board of Directors is kept up to date and briefed on all information risk issues affecting Trust Capital TC

8. Review and agree actions in respect of identified information risks.

9. Ensure that Trust Capital TC approach to information risk is effective in terms of resource, commitment, execution and appropriately communicated to all staff.

10. Provide a focal point for the escalation, resolution and/or discussion of information risk issues.

11. Ensure that effective information risk ownership and asset ownership roles are in place, with appropriate supporting procedures.

12. Ensure that identified information threats and vulnerabilities are followed up for risk mitigation, and that perceived or actual information incidents are managed in accordance with ISO 27001 requirements.

13. Ensure that there are effective mechanisms in place for reporting and managing information security incidents relating to the information of Trust Capital TC. These mechanisms should accommodate technical, operational or procedural improvements arising from lessons learned.

14. Provide leadership for Asset Owner and Risk Owners of Trust Capital TC through effective networking structures, sharing of relevant experience, provision of training and creation of information risk reporting structures.

15. Advise the Board of Directors on the level of information risk management performance within Trust Capital TC, including potential cost reductions and process improvements arising, etc.

16. Flexible to complete additional Risk reports upon Management requests.

SKILLS AND COMPETENCIES:

• Detail - oriented with high degree of accuracy

• Adhering to principles & values

• Applying expertise and technology analyzing

• Learning and researching

• Planning and organizing

• Achieving personal work goals and objectives

• Entrepreneurial and commercial thinking

• Ability to maintain confidentiality

• Communication and organizational skills

• Takes responsibility and accountability of his/her work

• Thrives in fast - paced environment

EDUCATION AND EXPERIENCE

• Strong analytical skills required to organize and analyze multiple, complex data sets as well as strong interpersonal and organizational skills.

• A bachelor’s degree required; Master’s desired.

• Cysec Advanced certificate is required.

• Strong technical skills.

• Computer literacy essential (Word, Excel).

• General understanding of marketplace AML issues and AML suspicious activity transaction monitoring systems, data mining/analytical tools, and KYC automated solutions is helpful.

• Strong ability to quickly grasp and understand business unit specific AML risks, develops comprehensive user requirements, and provides recommendations for appropriate automated solutions to mitigate those risks.

• A minimum of 2 years’ experience in a financial institution, to include demonstrated leadership. Familiarity with operational, financial, quality assurance, and human resource procedures and regulations is a must.