Technology Governance Analyst

Purpose:

The International Technology team provide operational support and delivery services to regional locations outside of AUS, namely London, Paris, New York, Singapore, Tokyo and Shanghai.

To keep the bank safe and maintain appropriate security and oversight, governance requirements across all areas of technology are increasing.  To support growing governance demands the Technology Governance role has been created to centralise and champion the governance agenda for International Technology, enabling engagement and direct support across Technology Teams.

You will act as a key partner to the NAB international offices, engaging with regional colleagues to understand technology governance concerns, to develop positive governance and assurance culture amongst them and represent Technology Governance regional activities.

You will adapt to changing priorities, emerging technologies and evolving operational requirements.

Essential capabilities (core)

• Strong analytical mindset and curiosity about people, process and system operational risks and governance.
• Ability to consolidate and analyse complex information, then turn it into clear, meaningful, easy to understand insights.
• Confidence to challenge and advise peers and more senior colleagues.
• Proactive situation management, innovative and critical thinker with tactical execution.
• Data/intelligence gathering and analysis.
• Excellent communication skills, both written and verbal.
• High quality planning, prioritisation, and organisational skills.
• Stakeholder management.
• Self-driven.
• A good understanding of relevant local regulations.

Other capabilities (technical)

• Proactively manage risk, meeting all policy and compliance requirements; perform controls; adhere to processes and procedures pertinent to the role; manage risks, events or issues as they are identified, escalate appropriately in a timely manner when needed.

Experience

• 3+ years technology risk management, governance and cybersecurity assurance, ideally within Financial Services.
• Proven ability to operate and deliver within large, multi-time-zone organisations, ideally financial services.
• Good understanding of banking/finance and technology compliance obligations, relevant regulations, industry requirements and their linkage to NAB processes.

Key Decisions:

• Risk and compliance escalation
• Influence performance improvements locally and contribute to the broader group governance and assurance.
• Productivity and efficiency
• Employees are expected to be able to judge when to escalate matters to avoid negative impact on the delivery of work using a degree of responsibility and maturity.

Key accountabilities for the role include:

• Tracking and reporting of Technology Risks and Changes (Grace – Findings, Treatment Plans, Change Initiatives, Exemptions)
• Supporting the Production Readiness (PRR) and Security Readiness (SRR) process with Service Owners
• Monitoring of Critical Hygiene Framework (CHF) for Technology Applications, Systems and Services
• Proactive management of vulnerabilities (VITs) and controls (CTRs) dashboards to ensure timely response and remediation
• Assessing and alerting of impending risk of CHF Blackout, and potential impacts to delivery plans.
• Manage Attestations (i.e. CMDB)
• Compliance with Group Information Risk Policy (GIRP)
• 3rd Party Supplier Governance process tracking and status

Key Interfaces:

• Technology Service Owners / Product Owners
• Strategy & Architecture
• Operational Risk & Compliance
• Group Security

Key Performance Indicators:

• Consistently deliver key accountabilities with quality, clarity and in a timely manner
• Consistently meet performance goals and objectives
• Consistently demonstrate NAB values (Customer Obsessed, Keep it Simple, Move with Speed, Own it, Win Together)
• Proactively manage risk, adherence with all policy and compliance requirements
• Escalate events, issues or breaches as they are identified (risk accountability forms part of all roles, as everyone is responsible for managing risk and compliance
• Key stakeholder feedback