IT Risk Management  

Role Overview:

This person is responsible to coordinate all IT risk management requirements and activities in line with local regulation and Group policies; namely, implementation of a Risk Governance and Strategy which adequately addresses IT risk types, development and execution of a Risk Management Framework to identify, (quantitatively) assess, report, and monitor company specific risks in an accurate and timely manner.

Key Responsibilities:

• Risk Governance Framework

Ensure that the Group Risk Management Framework related to IT and related OT specific requirements are fulfilled; especially by coordinating the implementation of the Framework and maintaining and reviewing the resulting processes and mechanisms.

• Risk Management Process

IT risk assessment (and further would support to minimization of control deficiencies),

• Risk Response and Risk Consideration in Decision Making

Provides recommendation about the IT Risk Acceptance, Mitigation plan , reviews the documentation and comments on it.

• Oversight and Control

Manage internal control and risk mitigation

• Risk Reporting

Provide quality reporting for:

1. 1. OpRisk monthly report
   2. QRR quarterly
   3. IRCS yearly
   4. control testing quarterly
   5. TRA yearly
   6. OJK report (semi annual and annual)
   7. ad hoc risk analysis

• Comittee Framework

Participate at RiCo (recommended for IT Risks), IT related committee such as ISSB

• Risk Management Process

IT risk assessment (and further would support to minimization of control deficiencies),

Requirement:

• Diploma or Bachelor Degree in information system/technology
• Having at least 5 years experienced in risk management process (risk identification, assessment, mitigation)
• Experienced in IT related risk management process (risk identification, assessment, mitigation)
• Experienced the internal control assessment based on COBIT 5
• Understand the regulatory requirements of Indonesia, with regard to IT

• Preferably Experienced in insurance company