Prudentials purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our peoples career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.
Responsible for ensuring compliance to technology risks policies and guidelines of Prudential and the regulatory body of Financial Institution (Bank Negara Malaysia) by taking ownership of IT related risk management activities such as coordination of IT audits, identification & management of gap assessments of newly released policies & guidelines and governance of relevant Bank Negara Malaysia policies & guidelines.
Principal Duties & Responsibilities
IT Audit Reviews
- Facilitates and supports twice yearly SOX audit.
- Facilitates and support Group Wide Internal Audit reviews.
- Facilitates and support PCIDSS reviews.
- Facilitates and supports all relevant technology related audit (internal and external) reviews that arises from policies requirements from Prudential or the regulator.
- Tracks & reports audit remediation action items to closure.
Technology Risk Management
- Identifies & assesses IT risks and work with relevant parties to implement risk controls.
- Conducts regular assessments of technology systems controls including but not limited to applications, business control processes, change control management procedures, security, networks, and computer and data centre operations.
- Reports findings to management and communicates recommendations for corrective actions.
- Timely submission of IT risk, security and regulatory reports to relevant parties.
Governance of Prudential and Bank Negara Malaysia (BNM) policies & guidelines
- Facilitates and supports all assessments relating to BNM Risk Management in Technology (RMiT) including but not limited to cloud risk, criticality and internet insurance.
- Facilitates and supports the notification or application of cloud hosting or internet insurance to BNM.
- Key liaison with BNM on technology risk related matters including responding to queries from consultation, facilitating and supporting consultation sessions.
- Identifies and assesses gaps from newly released policies & guidelines from the Group or Regulator.
- Tracks & reports the gaps remediation action items to closure.
Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.