Executive Officer, GT-Governance & Portfolio Management (Governance Support) at CIMB Group

Job description

Job Purpose * • To provide comprehensive operational governance, risk management, audit tracking, business continuity coordination and management reporting support across Group Technology (GT). • The role ensures timely compilation, monitoring and reporting of audit findings, Control Issue Management (CIM), Control Environment Testing (CET), Key Risk Indicators (KRI), Third-Party Risk Management (TPRM), Vulnerability Assessment and Penetration Testing (VAPT), and Business Continuity Management (BCM) matters to support operational efficiency and regulatory compliance across GT units. Job Description * A. Governance & Management Reporting • Consolidate and finalise monthly governance decks for management reporting i.e. MYMC, GTMC and TORCh. • Maintain Operational Risk Management (ORM) and audit reporting on open control issues, findings, owners, remediation status and due dates. • Compile patching, hardening, cyber assessment, TRAS and KRI updates for management forums. B. Risk & Audit Issue Monitoring • Perform fortnightly reviews of the CIM tracker and maintain due/near-due follow-up reports. • Conduct periodic GRC data pulls for CET attestations and KRI monitoring, and issue follow-up status reports. • Consolidate VAPT findings and remediation updates, and support monthly VAPT reporting provided by GT IT Security team. • Track project advisory and non-advisory audit progress, advisory memo issuance and project completion. • Monitor GCAD planner and Audit Dashboard status and prepare relevant management reporting. C. Business Continuity Management & DCC Responsibilities • Coordinate annual BIA and BCP submissions, DCC briefings, HOD sign-offs and submission to Group BCM. • Compile quarterly BCP, TPRM/outsourcing and major incident inputs for the Group BCM/BCMSC scorecard. • Maintain call-tree contacts, coordinate exercises and document observations and corrective actions. • Coordinate OSH incident reporting. Job Specification * Qualifications (Basic Degree/Diploma etc) Bachelor’s Degree in Computer Science / Information Technology or equivalent. Professional Qualification and/or Regulatory, Licensing requirements - Relevant Work Experience - Key Dimension of Impact * Non-financial • Coverage across Group Technology divisions and business units. • Monitoring of CIMs, CET attestations, KRI metrics and audit findings. • Monthly and quarterly reporting for management reporting i.e. MYMC, GTMC and TORCh. • End-to-end BCM coordination with GT units and Department Continuity Coordinators. Financial Indirect risk mitigation through timely remediation, regulatory compliance and business continuity planning, reducing exposure to penalties, audit non-compliance and operational disruption. Required Competencies and Skills * Competencies/Skills (Essential to succeed in this job) • Strong Microsoft Excel skills for consolidation, tracking and analysis, and PowerPoint skills for executive reporting. • Excellent communication skills in English both verbal and written • Able to adapt well to changing demands, multi-task effectively and work autonomously with a problem-solving and ownership of issues mindset • Proven record of good teamwork and collaboration Travel Requirements (if any) Frequency (Incl typical Destinations and Duration) Minimal to none; role is primarily office-based and supports internal operations.