NFR Specialist

Your day-to-day activities will be specific to the service you would be allocated, but, over time, you will build knowledge in all the tasks described below:

• Participate in and challenge risk assessments (including Business Impact Assessment and IT Asset Risk Assessment);
• Communicate, provide interpretation & training for IT Risk tooling and IT Risk Policies, Minimum Standards, Procedures, Methods and Techniques;
• Perform 2nd line IT Risk and Business Continuity Management review and challenging of IT Controls and Business Continuity controls.
• Perform 2nd line IT Risk monitoring of IT and BCM issues.
• Participate in, challenge and periodically report upon the risks of key strategic (IT/BCM) programs and projects;
• Measure and report the implementation of Information (Technology) or Continuity Risk frameworks throughout the organization;
• Support the identification of the impact of and the coordination of responses to law and regulatory changes, internal & external audit reports, etc. and monitoring the follow-up on the regulatory issue solving;
• Be a trusted IRM/BCM advisor towards 1st line of defense management and 1st and 2nd line of defense Non-Financial Risk specialists;
• Raise, review & challenge opening or reviewing for closure of risk remediation actions for IT Risk of Continuity Risk gaps identified;
• Participate and contribute to IT controls & BCM controls deep-dive or thematic reviews
• Contribute to the development and maintenance of a risk awareness curriculum and training program, and deliver risk awareness trainings to the organization;
• Perform and assist in other information risk activities where the requirements arise;