Lead, Quality and Risk Management - Singapore - SMRT Corporation Ltd

SMRT Corporation Ltd

Verified Company

Singapore

2 weeks ago

Posted by:

Wei Jie

beBee Recruiter

Description

Lead, Quality and Risk Management (IT)

Job Purpose

We are looking for a QRM (Quality and Risk Management) Manager for Enterprise IT team.

The role of the QRM manager is to:
-•Perform quality and risk management on Enterprise IT contracts such as ensuring project teams review the Post Implementation Review (PIR), reviewing these PIR and sharing learnings with team.

Engage with Internal & External audit, help to clarify artefacts and controls. Summarise and share learnings across IT teams.
Review and propose IT General controls and ensure the IT Policies, SOP and work instructions from each team are sufficiently documented. Carry out review of these documents and provide value add. Support teams that require help to perform process reviews with objective of improving controls.
Manage and coordinate the ISO 5-in-1 Management Systems activities for Enterprise IT (ISO9K, ISO14K, ISO45K, ISO55K, ISO22301)

Responsibilities

Quality & Risk Management

Responsible for planning, coordinating, and collaborating with other crossfunctional team members and providing required deliverables related to ASR activities.
Engage with System Owners to explain importance and rationale
Manage and coordinate the quarterly system and user access review
Trigger and coordinate the quarterly system and user access review exercise
Monitor the status of UAR (User Access Review) completion

Review submissions for consistency, compliance with definition.

Review and manage list of IT Systems Inventory so as to get project teams to plan for reevaluate strategies around techrefresh, replace, renewal, upgrade or decommission etc. Present at management forums to get support and drive actions.

Conduct the annual IT Risk scoping and risk assessment exercise to ensure appropriate IT general controls and applicable in-scope systems.

Risk assessment and maintenance of Enterprise IT risk register
Conduct risk assessment across various teams within Enterprise IT
Review and update of Enterprise IT risk register

IT Governance

Maintenance of Enterprise IT QRM policy and SOP documents
Manage policies, procedures and frameworks
Trigger the annual review of policies and SOPs
Work with the respective Process Owners on the policies and SOPs, ensuring that they are updated
Monitor the status and publish the approved policies and SOPs in Intranet (KM)
Maintain the document control list of policies and SOPs
Conduct internal quality review/audit on projects and processes to ensure compliance to approved policies and procedures
Manage and conduct Root Cause Analysis (RCA) for P1 and P2 incidents
Training/briefing to all Enterprise IT staff and continually raise the level of governance awareness through knowledge sharing and journals/articles
Audit facilitation, including validation, for internal and external audits
Facilitate external / internal audits and advisories from start to end
Following up on the responses to audit findings, eg. Financial audit, IT audit, ISO audits
Monitor and update status of audit followup action items
Facilitate the annual Control Self-Assessment (CSA)
Ensure process owners review and update the CSA checklists
Roll out the CSA checklists to staff to complete the selfassessment
Collate the results for reporting to Internal Audit
Support projects/systems on quality and risk management matters
Review of project and system related documents
Provide advisory to projects and systems support teams
Manage and coordinate the ISO 5in1 Management Systems

- activities for Enterprise IT (ISO9K, ISO14K, ISO45K, ISO55K, ISO22301)

Attend ISO training/briefing conducted by Safety and Security
Maintain the update of ISO related documents

Qualifications & Work Experience

Bachelor's degree in computer science or a related field is required.
Minimum 10 years working experience in IT Industry in leading Technology Projects
Experience in procurement sourcing process
Experience in ISO standards

Skills

Technical skills include:
Working knowledge of ISO9000, ISO14000, ISO45000, ISO22300, ISO55000 Management System
ITIL, COBIT framework and best practices
IT Project Management Life Cycle
IT System Development Life Cycle
IT Audit and Risk Management

Generic skills include:

Ability to engage with senior stakeholders (system owners), management level to explain risks and seek support for recommendations and actions
Demonstrate analytical and problemsolving skills
Selfstarter with excellent organizational and time management skills
Ability to work independently and collaboratively, as well as multitask
Strong organizational and planning skills
Strong interpersonal and influencing skills and an ability to work in a team environment
Good communication skills (written and verbal) with all levels of the organization
Ability to work with mínimal supervision and deliver to tight deadlines
Thorough, diligent and d