IT Governance and Control, Associate Manager

Job Scope / Position Summary

• Purpose of this role: The IT Governance and Control Associate Manager is responsible for ensuring that all software development activities meet established governance and control standards. This includes managing a team of code reviewers, identifying and addressing security vulnerabilities of inhouse /vendor applications, and promoting best practices in software development. 
• No. of subordinate: 0
• Non-financial KPIs for this role: complete assigned task on time, within budget and achieve target.
• Description of key challenge of this role:
• Ensuring that all software development activities meet established governance and control standards, e.g., privacy, security, and administrative regulations associated with Generali Vietnam & Group regulations.
• Coordinate to rapidly detect, minimize loss and destruction, mitigate the weaknesses exploited or resolve violations of security policies.
• Coordinate the development and implementation of a GVL information security training and awareness program.
• The nature of communication between this role and these parties: end user is all users of departments in GVL VN and internal IT team including System development team, Infra team and BA.

Main Responsibilities

• Manage a team of code reviewers, providing guidance and coaching on code review best practices. Develop and maintain policies and procedures related to software development governance and control.
• Conduct code reviews for all software development projects, and work with development teams to address any issues identified.
• Identify and report security vulnerabilities related to in house/ vendor applications, and work with development teams to remediate them.
• Promote best practices in software development, including version control, testing, and documentation.
• Work with cross-functional teams to ensure compliance with regulatory requirements, such as ISO 27001, NIST CSF and COBIT 5.
• Monitor and report on software development metrics, such as defect rates and cycle times.
• Develop and deliver training on code review best practices and other software development governance and control topics.