AVP, Technology & Project Risk Management

Assess, evaluate, and monitor the organization's risks, and support the implementation of risk management measures to help safeguard Bursa's financial and operational well-being. Conduct independent reviews and evaluations of potential risks and risk events to support appropriate assessment, investigation, and resolution. Support the execution of technology and project risk management activities and initiatives, including identification, assessment, monitoring, and reporting of technology-related risks. Assist the Director of Risk & Compliance in carrying out risk management functions and related projects as required.

Technology & Project Risk Management

• Review and challenge technology risk assessments, risk profiles, and risk and control self-assessments to ensure material technology risks are identified, assessed, and managed in accordance with approved frameworks, guidelines, and tools.
• Oversee the identification of key technology risk exposures, evaluate the adequacy of mitigating controls, and monitor remediation plans to address control gaps and strengthen the overall control environment.
• Conduct and facilitate technology and project risk assessments, including risk identification, analysis, evaluation, mitigation tracking, monitoring, and reporting activities.
• Review, assess, and benchmark the effectiveness of technology risk indicators, controls, and mitigation actions taken to monitor and mitigate overall risk exposure across Bursa Malaysia Group.
• Facilitate discussions and reviews of project risk profiles for Bursa’s key projects to ensure high impact projects are closely monitored.
• Provide independent assessment, consultative services and recommendations to Bursa’s project management team to help mitigate project risks.
• Provide technology risk insights in incident reporting and root cause analysis to strengthen controls and prevent recurrence of risk events.
• Prepare risk management reports for reporting to the Risk Management Committees, at Management and Board levels.

Project Readiness Review

• Ensure that project risks are effectively managed to support project implementation readiness, and provide assurance to relevant stakeholders including the Board, Risk Management Committee, Securities Commission, and Bursa Management.
• Prepare the System Readiness Review for reporting on high impact projects to the CEO, Risk Management Committee and Securities Commission prior to project launch.

Reporting

• To prepare and provide quarterly RMC Reports.
• To perform any other tasks as instructed by the Director of Risk and Compliance.