(1829) IT Risk Analyst - Fintech

The successful candidate will be responsible for, among others, the following key performance areas:

• Conducting risk-based supervision and assessments of Information Technology (IT) Risk, Fintech, digital financial services and emerging technologies within regulated institutions.
• Ensuring regulated entities’ compliance with regulations governing information technology and Fintech related risks.
• Assessing the adequacy and effectiveness of IT governance, operational resilience, technology risk management, outsourcing and third-party risk management frameworks within regulated institutions.
• Evaluating the prudential implications of emerging technologies, including artificial intelligence, cloud computing, digital assets, distributed ledger technology, embedded finance, open finance and Banking-as-a-Service models, etc.
• Identifying, analysing and escalating institution-specific, sector-wide and systemic risks arising from IT Risk, Fintech developments, technology concentration, cloud dependencies, critical third-party arrangements and interconnected digital ecosystems.
• Participating in supervisory reviews, onsite engagements, thematic assessments, licensing applications, regulatory approvals and innovation-related assessments.
• Identifying regulatory gaps, emerging risks and risk transmission channels arising from technological innovation, evolving business models and activities occurring outside the traditional regulatory perimeter.
• Producing risk assessments, supervisory reports, regulatory analyses and recommendations to support risk-based supervision and decision-making.
• Providing specialist technical support and subject matter expertise on IT Risk, Fintech and emerging technology matters to supervisory teams and relevant stakeholders.
• Monitoring domestic and international regulatory, supervisory and technology developments to benchmark industry practices and support the evolution of the Prudential Authority's supervisory approach.
• Developing and delivering training, presentations, research and thought leadership initiatives relating to IT Risk, cybersecurity, operational resilience, Fintech and emerging technologies.
• Staying abreast of international best practice and developments surrounding information technology risk and Fintech matters to benchmark and implement locally and develop regulation and methods to analyse and interpret information technology risk-based information.