Primary Objectives;
Custodian and system expert who can advise, analyze, plan, implement, maintain, support (and retire/refresh where required) all locally hosted (On premise, Cloud) data related platforms inclusive of data lakes, data warehouses, data marts, ETL, reporting, dash boarding and analytics:
Common to all Senior Analyst
- Maintain and ensure data platforms running in production are kept running and supported in a healthy state;
- Analyze and recommend new application and platform acquisitions to meet evolving Singapore Operation’s needs based on capturing and documenting business requirements elicited from business stakeholders
- Where the data platforms are in-house developed do the required coding and development, otherwise engage with 3rd party vendor to get enhancements developed and then deploy into test and prod when ready
- Ensure IT is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence). – Application and Platforms
- Ensure IT assets are protected and secure – Applications and Platforms
- Assist in annual budgeting – Applications and Platforms
- Be a key stakeholder and technology partner on the bank Digital journey.
- Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached.
- Where vendor based solution approach adopted and/or outsourced approach, arrange due diligence and assessment from technology perspective on behalf of users.
- Provide day-to-day support to business users on any data platform related system issues or constraints
- Ensure assigned application deployments running on bank managed environments are properly QA and meet conditions.
- Co-ordinate the setup and manage test environments to ensure business can do their enhancements and new projects testing.
Specific to Enterprise data platform and datamarts
- Enterprise Data Platform and Datamarts: Next Generation Cloud Data lake platform, theme specific cloud data marts, on premise legacy data warehouse system, on premise staging database, custom developed ETL
Key Responsibilities;
Strategy, Planning, Mgmt. Reporting
- Provide expert advice and support to technology management in the area of expertise
- Contribute in the formulation a comprehensive Branch IT strategy covering IT policies and procedures, security, architecture, business solutions and operational functional requirements
- Keep abreast of developments and innovations in the FI IT landscape
- Provide mentorship, support and guidance to colleagues, share information and facilitate problem solving
- Contribute in the yearly budgeting for IT expenditures and investments.
IT Operations
- Ensure data platforms running in production are healthy and functioning per expected.
- Ensure prompt and efficient provision of IT support based on assigned area of expertise (includes request from Data center operations team)
- Oversee contingency plans and ensure their adequacy
- Ensure IT assets are protected and secure
- Maintain and ensure timely renewal of digital certificates and proper lodgment with IT security team.
- Ensure IT operations run in a manner consistent with high score from audit, risk, compliance assessments. The following to be operationalized as standard procedure against all IT asset components:
- Administrative Accounts – All admin accounts lodged into PAM solution per group IT Security guidelines and MAS notice 655 point 4.1
- Patching – Patch notification process established with vendors and patch calendar updated, upon patch release assessment and implementation as needed Per patching guidelines and MAS notice 655 point 4.2
- Hardening - Per component definition and enforcement against SG security standard and Group IT Security guidelines and SG addendum/s and MAS notice 655 point 4.3
- Network Perimeter Defense – Network traffic and segments, firewalls, proxies, dns, vpn access setup in secure manner per group IT security guidelines and MAS notice 655 4.4
- Malware – IT Security consulted and all required IT security protections installed on IT assets per MAS notice 655 point 4.5
- Multi-factor Authentication – MFA, where applicable implement MFA of administrative and internet accounts with access to customer information using PAM per MAS notice 655 point 4.6
- Logging and Monitoring – Security, Capacity, Downtime, Audit
- Capacity Mgmt. – Pre-emptive monitoring (via monitoring), planning and execution of capacity upgrades as needed
- EOL/EOS Upgrades – Per group guidelines. Track and execute upgrades and/or do risk assessment and deviation approval.
- Housekeeping – scripted clean-ups and truncations of logs and temp files after necessary archives executed
- Backups – Required backup strategy per backup guidelines operationalized to central Backup Platform. Recurring scheduled backup validation activities scheduled and performed ongoing to ensure backups working per need.
- Work with system stakeholders to ensure proper classification of system criticality and ensure design and architecture can meet the assessed criticality needs:
- MAS 644 defined Critical system – Ensure DR setup and working and can achieve RTO within 4 hours, RPO within 2 hours and maximum unplanned downtime of not more than 4 hours per rolling 12 months;
- MAS 644 defined non-critical system – Ensure HA/DR per stakeholder requirement.
- BCM related activity planning and execution
- Review and Approve/Reject production change requests as part of TCAB committee
- Raise CAB CR as necessary
- Cutover related planning and execution
- Ensure and maintain adequate test environments in good working order to support enhancements and new projects;
- Adhere to SDLC for both in-house and 3rd party solution platforms.
- Take BAU day 2 operational ownership in terms of maintenance, support and minor enhancement ownership of new systems and/or major enhancements delivered by the Digital Delivery and DevOps team
- Track IT related spend against budget.
- Write Memos to authorize procurements
- Write Memos to get deviation approvals where required.
Application and Systems Development / New Platform Acquisition
- Lead in the requirements gathering and documentation, design and where in-house the coding, test support and implementation of new systems or enhancements of existing systems:
- Analyze, design, document and develop technical solutions according to business requirements (or in case of off the shelf, co-ordinate with 3rd party vendor)
- Provide accurate, complete and up to date system documentation
- Provide training to users to ensure correct usage and proper adoption upon rollout
- Oversee the QA of software implementation
- Oversee the deployment and implementation of applications to run on Cloud for existing systems based on end-user needs and business rationale.
- Assist team lead to write and table committee papers as required to get new systems and/or platforms, or major refreshes approved.
- Write Memos to authorize procurements
- Write Memos to get deviation approvals where required
- Work together with Digital Delivery and DevOps team to support digital and cloud initiatives in terms of initial advisory and then follow-on necessary analysis and co- ordination/implementation related to integration requirements and enhancement required to existing data platforms to enable the digital initiative.
- Work with Digital Delivery and DevOps team to support migration of workloads running on- premises to Cloud.
Regulatory and Procedural Expertise
- Keep up to date and refreshed on required reading related to guiding how IT must be run in a regulated Financial institution. Minimum read list:
- MAS Technology Risk Management Guidelines (TRMG)
- MAS Notice 644 – Technology Risk Management.
- MAS Notice 655 – Cyber Hygiene
- MAS Outsourcing Guidelines
- RHB Group IT Security Guidelines and SG addendum/s
- SG Patching Guidelines
- SG Backup Guidelines
- SG Technology Department Operational Manual (OM)
- SG IT Standard Operational Procedures (SOP), and System Manuals (SM)
- SG Procurement Operational Manual (OM)
Other Responsibilities
- Participate in Monthly Technology Department meetings.
- Participate in regular Team meeting.
- Use Department issue and work tracking platform.
- Maintain and keep up to date team knowledge base and assist in updating team document assets such as system manual / standard operating procedures (SOP), and operations manuals
