IT Risk Manager
Kuwait Finance House Malaysia
Total years of experience :33 years, 2 Months
Perform technology risk assessment
Maintain risk register
Validate risk compliance
Project risk assessment
- Work in collaboration with Line Manager for Production Support System in identifying all technology related risks are identified and registered in Risk Registry.
- Challenge all identified risks rated Medium and High by Line Manager prior to escalation to the Group Operational Risk Committee.
- Ensure that all overdue registered risks are properly mitigated with effective control.
- Work in collaboration with stakeholders from various Business Units and Technology team cross borders in all technology related audit exercise.
- Ensure timely management response for all audit findings.
- Track and ensure all commitment to resolution to all audit findings are being addressed in a timely manner.
•Develop strategic partnership with IT Departmental Head of Units and other Head of Business Units in ensuring the day-to-day IT operations are in line with Bank wide strategic Plan.
•Monitor the day-to-day governance activity in ensuring all IT related activities are able to support the desired business plan.
•Manage day-to-day processes in delivering IT services which include quality assurance and compliance activity designed in ensuring that all matters related to KFHMB IT is in compliance with all regulatory requirements such as Central of Malaysia (BNM) IT Guidelines (GPIS 1), KFHMB policies and procedures and regulators requirements.
•Manage IT services delivery to be within SLA while meeting the expected quality.
•Monitor system infrastructure (hardware, applications, services and connectivity) uptime and availability as per SLA.
•Review and approve all change requests (CR) submitted by business users. Assess risk associated with every change request in ensuring that changes made to the production environment will not be impacted by service unavailability.
•Identify key IT risk as per the IT Risk Management Plan. Continuously perform the assessment on the risk areas to mitigate the impact to the Bank. Constantly evaluate the control measures in place in order to lower or eliminate the risk rating in an effort to ensure the continuity of business.
•Ensure the successful execution of any strategic implementation initiative drive by the department/Bank in maintaining the value of services to customer (internal/external) through continual evaluation and improvement of the underlying processes to deliver quality services.
•Assist Head of IT and Chief Operating Officer in managing the increase in IT capital and operating expenditure required to be implemented as part of the effort to mitigate potential risk areas for ICT infrastructure which generally increase along with the business expansion.
•Review and recommend all IT expenditure (CAPEX and OPEX) for procurement and payment.
•Provide monthly and quarterly reporting on IT budget (CAPEX and OPEX) and performance statistics, exception report and progress updates for Senior Management. (IT Steering Committee, Management Committee and Board of Directors)
•Review the Bank's Disaster Recover (DR) technical documentation for all critical systems in ensuring KFHMB disaster recovery are updated and readily available during the disaster.
•Manage third party suppliers Annual Maintenance Contract (AMC) and performance in ensuring the services provided (SLA, Response time, Terms and Conditions) are able to support the desired IT Operations. Review and negotiate AMC cost in line with KFHMB cost saving initiative.
•Review and update all ICT related Bank wide policies and procedures to keep abreast with the most up to date technology, threats, and regulators guideline that may affect the financial industries.
•Manage all IT related incident escalation until resolution and closure.
•Manage KFHMB IT Security & Policy Control in securing KFHMB’s network, application, hosts, and user access to application. Evaluate the need to introduce latest security technology that is able to minimize the security threat pose to the Bank.
•Provide management responses to all audit inquiries and audit findings. Oversee all IT related audit findings till closure.
•Manage resource planning for the IT Department in ensuring resources availability to support the internal and Bank wide project initiative.
1. Manage IT Outsourcing Department for small business clients.
2. Set clear direction and expectations for team members to ensure customers expectation are achievable and company's objectives are met.
3. Ensure service provided to client meets the Service Level Agreement (SLA).
4. Monitor all logged tickets and ensure all problems are solved in a timely manner.
5. Verify monthly service report, assets management, and inventory report for clients.
6. Review proposed SLA and make recommendation on contents of contracts/agreement with clients.
7. Review clients existing SLA with 3rd party vendors and monitor their performance and services.
8. Define project scope and deliverables and ensure that each project is completed within timeline, scope and clients budget. Develop and recommend procurement strategies for various nature of project.
9. Maintain strategic working relationship with vendors/suppliers so as to ensure that the company's Key Performance Indicators and objectives are met
10. Maintain and update of current information on new product and technology, industry prices, and availability trends.
11. Establish, update, manage and control all procurement technical documentation of the company Operations Manual, Network documentation, System documentation, PC related documentation.
12. Recommend modifications/ improvement in the existing systems.
13. Plan and recommd the procurement and implementation of Information Technology network, technical and hardware strategies.
15. Prepare and present to the top-management on the department performance, cost savings or reduction, budget and forecast plan.
16. Maintain up-to-date knowledge of computer operating procedures, reliability and service.
17. Advise clients on internal IT policy.
18. Propose network layout, infrastructure and technology procurement planning for client.
19. Provide strategic support and technical vision and guidance for onsite Support Engineers.
1. Provide planning, recommendation, procurement and implementation of Information Technology network, technical and hardware strategies.
2. Produce and maintain procedural documentation. Recommend modifications/ improvement in the existing systems.
3. Lead team in providing troubleshooting, technical and maintenance support services.
4. Responsible to manage successful installation, upgrading and resolving of PC hardware issues.
5. Provide technical support for Payment Processing System for the Embassy of Malaysia.
6. Timely and accurate processing of Purchase Requisition and Purchase Orders of IT hardware and software. To oversee the management and maintenance of an accurate hardware inventory (Desktop PCs, Notebook, Printers, etc).
7. Ensure and maintain a proper record and documentation system for the department for easy identification and access by any interested personnel or auditor
Achievements/Accomplishments:
1. Successfully lead IT Support team in providing technical and help desk support for users. Executed and completed the installation and upgrade of commercial software for desktops and laptops for all Malaysian Government agencies under the embassy.
2. Successful deployment, implementation and management of IT technical project particularly in the areas of local area network, wide area network, operating systems, databases, Email systems, Firewalls and Antivirus.
3. Manage problem solving, support and assistance for use of information technology and technical procurement issues. Analyze system requirement and provide recommendation to resolve issues.
4. Successfully manage team to provide assistance for data access, transfer and conversion, for example ensures successful schedule backup for data on the accounting department server
1. Provide assistance for data access, transfer and conversion.
2. Install and upgrade commercial software for desktops and laptops
3. Troubleshoot and diagnose hardware problems.
4. Provide helpdesk support for end user.
5. Monitor network (intranet and internet availability)
6. Monitor network infrastructures such as router, switches, servers and printers.
7. Respond to user needs and requirements with regards to network access. Assist subordinates in the use of network resources
8. Maintain up-to-date parameters of information for the network clients and electronic mail
9. Perform routine data back-up on shared directory. Restore back-up data upon request by user
10. Restore and virus detection and removal software facilities up-to-date.
11. Coordinate and negotiate rates with hotels for room, facilities, and meals.
12. Coordinate, plan, and negotiate rates with transportation companies in facilitating logistic arrangement for convention attendees.
13. Coordinate with White House and Capitol Hill staffers on security details for convention attendees during the White House and Capitol Hill briefing.
14. Coordinate with major media outlet such as CNN and CSPAN in covering events attended by prominent Keynote Speaker such as Attorney General of The United States of America.
1. Provide Help Desk assistance and support for employees at PSI Headquarters.
2. Perform hardware installation, trouble shoot and repair hardware failure.
3. Maintain asset management inventory for employer.
1. Perform data entry for all MARA sponsored students into database system.
2. Generate quarterly students academic performance report
3. Assist Office Manager in providing Functional Specification Requirement for MARA Students Information System
4. Perform User Acceptance Test (UAT) for MARA Students Information System (MSIS).
5. Team lead for defining Business User Functional Requirement (BFR) and User Acceptance Test (UAT) for MARA Student Information System at MARA Students Office, Washington DC (1993)
6. Procurement planning of desktops and servers for newly acquired MARA Students Office, Washington DC (1992)
In Progress
CGPA: 3.01/4.00