Senior Manager Operational and Resilience Risk
The Saudi British Bank - Sabb
Total years of experience :28 years, 1 Months
• Manage and drive in-country Resilience Risk initiatives.
• Providing guidance and risk insight around Business Continuity, Crisis Management, Incident Management, Corporate real estate, Health and Safety and physical Security risk and the associated remediation as required
• Ensuring critical issues both in key controls and material change programmes are managed and understood by and escalated to appropriate governance forums for appropriate and timely resolution
• Developing key relationships with business and functional areas ensuring a clear understanding of the material risk and control issues within the respective areas
• Providing guidance so business/function management fully considers and effectively manages business risk in accordance with established policies and procedures
• Assist in the development and implementation of deliverables and strategic direction across the 4 Pillars of Operational Resilience (1.) Business Resilience, (2.) Technology Resilience, (3.) Third Party Resilience, and (4.) Cyber Resilience; closely partnering with the 1st Line of Defense from a control and oversight perspective
• Assisting internal, external, and regulatory audits, and managing relationship with the regulator(s)
• Acting as trusted advisor to ensure that operational processes are operating and that a robust internal control environment is in place, commensurate with the volume/scale of operations
• Educating stakeholders to understand the impact of emerging risks that require changes to controls, resources and business operations to ensure they remain within appetite
• Providing subject matter expertise and credible challenge on SABB Resilience Risk policy dispensations and risk acceptances.
• Providing direct guidance, oversight and challenge on Business Continuity, Crisis Management, Incident Management, Corporate real estate, Health and Safety and physical Security risk key Information Technology and Cybersecurity Risk issues, internal incidents, external events, and strategic bank change programs to ensure risks are quantified and appropriate actions are taken.
• Continually assess the adequacy of SABB’s policy and the control environment relative to risk, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, organization change, the impact of new products, services, technology and / or threats.
• Accountable to support the creation and maintenance of relevant core policy and guidance, and overseeing the alignment of 1LoD development of procedures and standards
• Maintain awareness of operational risk and minimize the likelihood of it occurring, including its identification, assessment, mitigation and control, loss identification and reporting in accordance with the SABB Operational Risk Management Framework.
The Head Business Continuity act as a principal authority within SABB on the governance and regulatory elements of Business Continuity Management, including vulnerability assessment, impact assessment, plan development, maintenance and testing, also ensure that each business complies with the SABB standards in relation to Business Continuity and Crisis Management.
This role carries responsibility for BCM governance and regulatory compliance in SABB. This presents a unique challenge in terms of BCM, because of its size, complexity and the inherent vulnerabilities of its infrastructure, its achieved by:
Assessing Business Continuity requirements of each business unit
Monitoring of business developments in terms of systems changes, premises changes and people changes, assessing the BCP impacts and initiating/confirming appropriate action.
Providing guidance and support to the relevant Business Continuity Crisis Management Teams
Maintaining Business Continuity facilities, systems, premises and agreements to ensure these remain current and support the Business Continuity recovery time objectives, within each business
Assessing contingency options including internal solutions, Group solutions and external contingency provision.
Preparing discussion papers and slides for circulation or presentation to plan holders and steering group members to enable informed sign off of proposals and recommendations.
Conducting post incident reviews of serious or unusual incidents to ensure all learning points are captured and recovery strategy is enhanced.
Stay abreast of new developments in BCP through membership of BCI and liaison with industry contacts.
The responsibility of this position:
Manager information Security/Access Management (AM) function and manages the day-to-day Support activity, maintain a direct channel with compliance and the local regulator, secure and protect the business operation e.g. access control, assess and manage security threats, manage security incidents to minimize the business impact, risk assessment.
Leads the User Support Department (USD) function and manages the day-to-day Support Engineering, Network, Office Automation & Desktop Support and SABB's Back-up Data Center at WPM Region and Helpdesk team, Maintains the function of Relationship Management in WPM/EPM area by ensuring that required IT services are identified, developed and supported to the satisfaction of the business. Manages all projects in EPM / WPM / CPM related to IT support and coordination.
Manage IT staff.
Managing and supporting Data Center (Servers, LAN, WAN, Data equipments, Telephone lines, Data circuit, Telephone Exchange, run beginning/end of day in Unix systems).
Managing and supporting all Data circuit (local, national and international) between Samba London, Citibank and Riyadh.
Compliance officer for any IT related.
Managing and supporting all projects developed in SAMBA London during my assignment there.
Manage and supporting all application running in SAMBA London related to CITIBANK and HSBC Bank
Manager Project office unit.
Manager Helpdesk and support
Manager Windows & internet Team
Manager IT (System Security) team.
Manager LAN/WAN support/admin team.
Manager Lotus Notes (Servers/Client/Application) support team.