IT Risk Manager

Kina Bank is seeking an experienced and proactive IT Risk Manager to join our Governance, Risk and Compliance team based in Port Moresby. Reporting to the Head of Risk, this second- line risk role is responsible for overseeing and maintaining the organisation's Information Technology Risk Management Framework (ITRMF), ensuring alignment with the Group's Risk Management Strategy and Framework. The successful candidate will play a key role in identifying, assessing, monitoring and reporting IT risks across the Group in partnership with ICT, business units, senior management and other assurance functions.

What you will do

• Develop, implement and maintain the Group's Information Technology Risk Management Framework.
• Monitor, assess and report on IT risks, incidents, control effectiveness and emerging technology risks.
• Maintain the IT Risk Register and conduct risk assessments, control testing and monitoring activities.
• Partner with ICT teams and business stakeholders to identify risk exposures and implement appropriate mitigation strategies.
• Provide risk advice and guidance on technology initiatives, projects, system changes and new products.
• Prepare and present risk reports to management, committees, regulators and other stakeholders.
• Support the development and review of IT risk policies, procedures and governance documentation.
• Promote IT risk awareness and support cyber security and information security training programs across the Bank.

What they ask for

Education: Degree or higher · Experience: 5+ years

• Bachelor's Degree in Information Technology, Computer Science or a related discipline. Industry certifications will be highly regarded.
• Minimum 5 years' experience in risk management. At least 2 years within banking or financial services will be an advantage.
• Strong knowledge of IT risk management frameworks, governance practices, risk assessments, control testing and monitoring processes.
• Experience developing risk dashboards, heat maps and management reporting for senior stakeholders.
• Excellent analytical, communication, presentation and stakeholder management skills.
• Sound understanding of information security principles, emerging technology risks and industry standards.
• Proven ability to influence, collaborate and build trusted relationships across all levels of an organisation.
• Strong leadership capability with a proactive, solutions-focused approach.

How to apply

Only shortlisted applicants will be contacted.