At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.
The CRO division develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance for the various business activities for Julius Baer, aiming at sustainable growth of the franchise.
The incumbent is responsible for supporting the Head of Non-Financial Risk Control (NFRC) Asia in a variety of functional areas within NFRC and Data Loss Prevention (DLP) focusing policy, governance, incident management and escalations, operations, internal controls, risk advisory and electronic discovery (e-forensics) for Asia. This means providing the needed support in developing, driving and managing all NFRC activities (including projects and education) in BJB Asia. The incumbent will also work closely with global counterparts in Switzerland as part of the team to support the rollout of global initiatives in Asia.
As part of the Risk Management function in the Bank, the incumbent will need to work closely with the Front, IT, Corporate Services or other relevant functions together with the Head of NFRC Asia to ensure that NFRC risks are highlighted, mitigated and remediated appropriately.
YOUR CHALLENGE
Data Loss Prevention
Maintain, operate and continuously optimize DLP systems covering both data-at-rest and data-in-motion controls across Asia
Review and enhance DLP policies, ensuring alignment with business requirements, regulatory obligations, and information security standards
Oversee and support DLP platform upgrades, releases, and migrations within Asia
Monitor, review, investigate, and follow up on DLP alerts and incidents to ensure timely remediation and risk mitigation
Perform end-to-end case management for DLP incidents, including investigation, stakeholder coordination, escalation, and closure, in alignment with the bank's breach management framework
Generate and deliver DLP incident metrics, trend analysis, and breach reports to various stakeholder groups
Support DLP governance and enhancement initiatives, including roadmap planning, regional engagement with Head Office, and the delivery of ad-hoc business or regulatory projects
Work closely with Business Partners and other stakeholders to increase DLP awareness, strengthen data protection practices, and support the effective implementation of DLP controls and policies
Other NFRC Responsibilities
Support NFR Asia investigations as required, including the operation of relevant tools
Review, maintain, and coordinate updates to Information Security policies and guidelines, and provide guidance and clarification to business stakeholders
Provide security risk advisory and risk management support for new initiatives within Asia
Take ownership of assigned NFRC controls, ensuring timely completion, effectiveness, and compliance with internal requirements
Support internal and external audits by coordinating reviews, facilitating evidence collection, and tracking remediation activities
Provide consultation and advisory services on Information Security domains, including Client Identifying Data, Cross-Border Data Transfer, Data Ownership, Data Protection, Data Export Controls, and technology-related initiatives
Collaborate with global, regional, and local stakeholders to effectively manage information risk matters, and communicate risk insights, control requirements, and key issues to senior management and other stakeholders
Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and…