Job Purpose: To execute the Technology Risk Management activities by evaluating risks and providing on demand advisory to improve technology risk remediation.
1.Perform directly to rollout independent Technology Risk Assessments in the following scenarios:
a.Technology Projects and Digital Transformation.
b.Reviews of First Line Function effectiveness for Technology Risk controls
c.On demand following technology incidents.
2.Assist risk owners on design & implementation of Technology Risk Remediation Plans by providing expertise (Technical, functional and procedural) and provide guidance for risk based decisions.
3.Identify and validate Technology Risks upon reviewing Internal & External Audit Reports, Technology Risk Notes, Technology Incidents and contribute to their associated action plans to mitigate the same.
4.Handle all of the Technology Risk Management Activities including but not limited to reviewing & qualifying the different risk notes and ensuring the relevant updates are reflected in the central risk register, communicating and notifying risk owners with relevant technology risks, coordinating with the relevant stakeholders on the different risk remediation plans.
5.Update the different Technology Risk Management Documentation Corpus
6.Assessment of metrics and Key Risk Indicators breaches to monitor the effectiveness of the controls and ensure proper risk mitigation.
7.Contribute with relevant departments to identify risks, risk gaps and early warning signals for Technology Risks that could arise from any change in systems, services, processes or procedures.
Policies, Processes, and Procedures
Follow all relevant department policies, processes, and standards operating procedures and instructions so that work is carried out in an controlled and consistent manner
8.Assist in defining, maintaining and enriching Technology Risk Managements’ Metrics, Taxonomy and Severity Scale as well as proficiently practice Technology Risk Management techniques, methods and tools that were designed to ensure that all Technology risks are adequately captured and managed. Moreover, prepare training materials and carry out communications activities in alignment with relevant stakeholders in order to improve mindset and knowledge.
9.Track and follow up with 1st Line of Defense of the Technology risks, which are still under assessment in the centralized risk register.
10. Assist in reviewing the different risk treatment plans related to Technology Risk Management in cooperation with relevant stakeholders prior submitting to the relevant committees, to ensure effective response to identified technology risks
Policies, Processes, and Procedures
11.Follow all relevant department policies, processes, and standards operating procedures and instructions so that work is carried out in an controlled and consistent manner
Day-to-Day Operations
12.Follow the day-to-day operations related to own jobs in the Security & Technology Risk Management department to ensure continuity of work
Compliance
13.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB’s sound legal position and mitigate any potential risks
Qualification & Experience
§Bachelor of Engineering, Computer Science, Information Technology or its equivalent.
§For Officer 3 – 5 years in Information Technology, internal or external IT audit or a related discipline with Risk Management background.
§For Senior Officer 5 – 8 in Information Technology, internal or external IT audit or a related discipline with Risk Management background.
§Good knowledge of the Banking business environment, technology controls and Risk Management.
§Knowledge & experience with at least one of the Risk Management Framework: ISO31K, FAIR.
§Recommended relevant industry certifications, including but not limited to:
·Risk Manager ISO 27005
·IT Infrastructure Library (ITIL) Foundation.
·GIAC Critical Controls Certification (GCCC).
·Certified Information System Auditor (CISA)
· Certified Risk and information Systems Control (CRISC)
Commercial International Bank was established in 1975 as a joint venture between the National Bank of Egypt (NBE, 51%) and the Chase Manhattan Bank (49%) under the name "Chase National Bank of Egypt”. Following Chase's decision to divest its equity stake in 1987, NBE increased its shareholding to 99.9%, changing the Bank’s name to Commercial International Bank (Egypt) S.A.E. NBE’s stake gradually decreased through several public offerings till reaching 18.7%. In 2006, a Consortium led by Ripplewood Holdings acquired NBE stake. In July 2009, Actis, a leading emerging markets private equity firm, invested US$ 244 million to get shares in CIB, acquiring hence 50% of the Ripplewood Holdings Consortium’s stake. Five months later, Ripplewood sold its remaining 4.7% stake over the open market, marking the successful transition of strategic partnership to be with Actis, who then became CIB’s largest shareholder with a 9.1% stake. In March 2014,Actis sold a portion of its holding, representing 2.6% of the Bank’s total outstanding shares, in the open market to a group of international investors. In May 2014, Actis, successfully realised its investment in CIB and sold its remaining 6.5% to Subsidiaries wholly owned by Fairfax Financial Holdings Ltd “Fairfax”.
CIB is Egypt’s leading private sector bank, offering a broad range of financial products and services to its customers, including enterprises of all sizes, institutions, households and high-net worth individuals. CIB strives to provide superior financial solutions to meet all customers’ needs. Having the strongest brand equity rightfully places CIB as the bank of choice for over 500 of Egypt’s largest corporations. CIB shows tremendous potential within the bourgeoning Retail and SME Banking markets. Through its superior management, high-operating standards, corporate governance best practices and training programs,CIB has succeeded in becoming the most profitable commercial bank operating in Egypt for more than 40 years.
