Associate Risk Analyst/Risk Analyst, Tech. Risk Specialist Unit | Technology & Cyber Supervision Department (TCS)

Support risk quantification, data analytics and horizontal surveillance initiatives to strengthen technology risk management, inform supervisory decision-making, and enhance financial sector resilience.

Support the development of risk quantification capabilities through data collection, benchmarking and analysis. Assist in conducting thematic reviews and studies on risk quantification models, methodologies and industry practices to promote sound risk management. Support the adoption of data analytics, big data and artificial intelligence in technology supervision. Perform horizontal surveillance and analytics to identify and escalate emerging risks across the financial industry. Provide tactical and strategic recommendations to address excessive risk in the financial system. Assess complex technical issues to support supervisory assessments and policy development. Assist in developing and maintaining risk indicators, dashboards and reporting tools for technology risk monitoring. Apply continuous improvements in own area of work in line with regulatory requirements and global best practices. Prepare reports, dashboards, presentations and public communications where required, and communicate risk assessment outcomes to stakeholders. Maintain regular engagement with stakeholders and coordinate industry working groups to advocate sound practices. Capability Building Pay-it-forward: Mentor newcomers. Show-the-way: Prepare materials and conduct training for supervisors and financial institutions. Undertake other ad hoc assignments as directed.

Academic Qualifications Min. undergraduate degree in computer science/ data science, or any other relevant degree Experience At least 3 years in IT/cyber/operational risk quantification analysis, financial/risk application programming, technology risk management, IT architecture governance and implementation, and/or data analytics Technical skills Programming skills (e.g Python, R, SQL) and professional certifications related to risk quantification analysis, information systems security, auditing, control, assurance and risk management, e.g. ISACA CISA/ CISSP/ CRISC/ CGEIT/ CDPSE, ISO27001, CEH, CQRM, OpenGroup FAIR, ITIL, TOGAF, CCSM/CCSK , is desirable.