Assistant Manager Risk

Purpose

The role played a crucial role in supporting IT departments’ compliance efforts related to SAP data privacy and protection. The role is responsible for the implementation of SAP UI Masking solution and providing the support to ETS teams for the implementation of SAP UI Logging solution. The role is also act as main focal person from ITG to coordinate with Corporate Regulatory Affairs department for the compliance program under the requirements of National Computer Emergency Response Team Rules, 2021 of Ministry of IT & Telecom.

Education (Mandatory)

Bachelor’s/Master’s in computer science / Engineering / Information Security or related domains.

Trainings & Certifications (Mandatory)

• IT Compliance
• Regulations related to IT in Pakistan
• Data Protection and Privacy
• SAP UI Masking and UI Logging tools
• Computer Emergency Response Teams (CERT)
  
  

Years Of Experience

2-3 years of experience in IT/IS Compliance functions for Utilities, banking, or multinational companies.

Functional Competencies

ACT RESPONSIBLY WITH INTERGITY

THRIVE IN CHANGE

LEAD WITH INSPIRATION

EMPOWER TEAMS

DELIVER RESULTS

DELIVER CUSTOMER VALUE

DECIDE STRATEGICALLY

Area Of Responsibilities

• SAP Data Protection and Privacy - 50% Act as a main focal person to implement an SAP data protection and privacy solutions to meet the legal requirement to protect the personal information of individuals, including KE employees, customers, and suppliers. Worked closely with EBS, EDS and ETS teams to implement the solutions of SAP UI Masking and UI Logging in ITG.
• Computer Emergency Response Team (CERT) Compliance Program - 30% Worked closely with Company Regulatory Affairs department to implement a compliance program to meet the requirements of National Computer Emergency Response Team Rules, 2021 of Ministry of IT & Telecom. The rules require implementation of processes, solutions and services related to CERT in KE, and the compliance of these implementation is necessary to avoid compliance issues and risks in the future.
  
  

Worked regularly with Company Regulatory Affairs department to provide the compliance reports against NITSB guidelines related to IT controls implemented in KE.

• Development and Maintenance of Inter-Department SLAs and SOPs - 20% Interacting with and providing advice to document owners and their designees to ensure documents are updated and current and conform to the firm-wide requirement. To have active and direct leadership in the development, drafting, review, socialization, and approval of documents i.e. SLAs and SOPs.