Executive Officer (Data Governance & IT Risk Management) – Commercial Bank Colombo

About the job

Company Description:

With an enduring vision of being the most technologically advanced, innovative and customer friendly financial organization, we, the Most Awarded Bank in Sri Lanka, continue to progress steadily while being the first Sri Lankan bank to be listed amongst the Top 1000 Banks in the World. Our unparalleled record of success is supported by an unmatched suite of digital offerings and superior standards in service, stability and performance. We are poised to ascend to even greater heights in the near future.

Role Description:

• Assist in implementing and maintaining the Data Governance & Privacy Framework, ensuring alignment with the Personal Data Protection Act. 
• Align all stakeholders to the data-related technology roadmap and regulatory guidelines by providing insights and recommendations. 
• Aid in the transformation journey by adopting and integrating new technologies. Conduct awareness programs to foster a culture of data governance and security among all bank users. 
• Collaborate with Key Management Personnel (KMPs) in business, Marketing, HR, IRMD, Compliance, and Finance Departments etc., to ensure effective data governance and IT Risk Management practices.
•  Assist in developing and updating data governance policies and procedures. 
• Ensure to evaluate and advise relevant stakeholders on Personal Data Protection Impact Assessment (DPIA). 
• Co-operate and comply with the directives and instructions issued by the Data Protection Authority on matters relating to data protection. 
• Monitor and evaluate the performance of data governance initiatives including Data Loss Prevention (DLP). 
• Coordinate with cross-functional teams to align data governance projects with business objectives. 
• Identify opportunities for continuous improvement in data governance processes.

Qualifications:

• A bachelor's degree in Data Science, Information technology specialized in Cyber security, Law or a related field is often required. 
• Holding CIPP, CDPP, CDPSE, CISM and DABF would be an added advantage. 
• Four (04) years' experience in Banking & Finance including Two (02) year experience in information security, Data Governance & Data Privacy. Working experience at Security Operations Center will be an added advantage.
• Familiarity with DLP tools, technologies, and data Governance principles and understanding of data protection regulations (GDPR, PDPA). Ability to analyze data, identify patterns, and make informed decisions. 
• Ability to explain technical information to both technical and non-technical audiences