Analyst, Email Content Monitoring (ECM) - Group Risk Management

OCBC Bank is the longest established Singapore bank, formed in 1932 from the merger of three local banks, the oldest of which was founded in 1912. It is now the second largest financial services group in Southeast Asia by assets and one of the world's most highly-rated banks, with an Aa1 rating from Moody's. Recognised for its financial strength and stability, OCBC Bank is consistently ranked among the World's Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

Division Description
Group Risk Management (GRM) is an independent function responsible for ensuring that risk management practices at OCBC Bank are effective and comprehensive.
GRM builds and drives the Bank's businesses through an integrated risk management approach relying on strong risk analytics to support strategic business decision-making and to create a competitive edge for the Group.

Key Responsibilites
The successful candidate will be playing a lead role in ECM team and will assist the ECM team in the following areas of work:

• Assess Email Content Monitoring (ECM) Alerts as per defined SLA
• Assist in conducting sample checks of ECM alerts closed by other team members
• Review of System Changes on Email Content Scanning System
• Prepare Management Reports and assist in Data Loss Impact Assessment reviews
• Assist/Conduct Risk Control Self-Assessment (RCSA) for ECM operations
• Plan and coordinate UAT testing, when required
• Assist in conducting DR / BCP tests
• Periodically Reviewing existing Content Monitoring Rules
• Periodically conduct DLIA reviews with Business Units
• Identify measures to address Data Loss Prevention Risk through outgoing emails
• Implementing Content Monitoring Rules for newly identified Sensitive content
• Preparing Reports for Senior Management - Board Report, Operational Risk Committee (ORC) report, Half-yearly report to Head of Group ORM on ECM Rules
• Assist in establishing the technology roadmap for DLP system

Qualifications
The ideal Candidate will meet the following requirements:

• Knowledge in handling Data Loss Prevention risks in Financial Institutions
• Strong communication skills to be able to effectively engage stakeholders at all levels in the bank / FI
• Sound understanding of Information Risk policies
• Knowledge of diverse information / content that typically exists within Bank(s) / FIs
• Good working knowledge of MS Office
• A good team player
• Knowledge in any of the following would be an advantage:
  • Knowledge of Email Content Monitoring (ECM) for data loss prevention, preferably using Broadcom/Symantec DLP
  • Knowledge of Broadcom/Symantec ECM rules configuration
  • Knowledge of programming in Regex & familiarity with Microsoft's Information Rights Management (IRM) functionality
  • Knowledge of PDPA, MAS's Privacy of Customer Information, etc.
  • Knowledge of drafting Standard Operating Procedure for any DLP operations
  • Knowledge of identifying potential data emails and ability to conduct reviews and investigations jointly with Business Units

At OCBC, we recognise your drive, passion and talent. We will bring out the best in you and empower you to excel. Fulfil your life goals and career ambitions with us.

*We regret that only shortlisted Candidates will be notified.