ITAO – Information Technology Asset Owner

Description

IT Application Owner is responsible for identifying and assessing the current state technological infrastructure for gaps or potential improvements using their knowledge of infrastructure solutions and where industry innovations are in their lifecycles.

Work includes :

• Determining the appropriate technological solutions to balance delivery and compliance.
• Identifying gaps in the current infrastructure solutions and implementing the associated improvements whilst ensuring compliance with technical roadmaps.
• Improving the safety and security of IT Applications, compliance with internal and external standards and operational readiness.
• Supporting the bank’s audit function in the remediation of audit points and issues to reduce risk.
• Identifying and assessing IT Application risk and implementing the associated technology measures.
• Contributing and assisting the implementation of policy and strategy specific to IT management and Information Security.
• Identifying opportunities to incorporate new technologies / approaches into best practice

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy,

Your key responsibilities

Strategy & Architecture

Enterprise IT governance : Reviews current and proposed information systems for compliance with the organisation's obligations (including legislation, regulatory, contractual and agreed standards / policies) and adherence to overall strategy. Provides specialist advice to those accountable for governance to correct compliance issues.

Information security : Communicates information security risks and issues to business managers and others. Performs basic risk assessments for small information systems. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organisational policy and local risk assessments. Responds to security breaches in line with security policy and records the incidents and action taken.

Information content publishing : Understands technical publication concepts, tools and methods and the way in which these are used. Obtains and analyses usage data and presents it effectively. Understands, and applies principles of usability and accessibility to published information.

Specialist advice : Actively maintains knowledge in one or more identifiable specialisms. Provides detailed and specific advice regarding the application of their specialism(s) to the organisation's planning and operations. Recognises and identifies the boundaries of their own specialist knowledge. Collaborates with other specialists, where appropriate, to ensure advice given is appropriate to the needs of the organisation.

Knowledge management : Maintains knowledge management systems and content to meet business needs. Supports others to enable them to complete knowledge management activities and form knowledge management habits. Reports on progress of knowledge management activities. Configures and develops knowledge management systems and standards. Supports changes to work practices to support capture and use of knowledge.

Business risk management : Investigates and reports on hazards and potential risk events within a specific function or business area.

Continuity management : Implements and contributes to the development of a continuity management plan. Coordinates the assessment of risks to the availability, integrity and confidentiality of systems that support critical business processes. Coordinates the planning, designing, and testing of maintenance procedures and contingency plans.

Data management : Assists in providing accessibility, retrievability, security and protection of data in an ethical manner.

Methods and tools : Provides support on the use of existing method and tools. Configures methods and tools within a known context. Creates and updates the documentation of methods and tools.

Change and Transformation

Requirements definition and management : Assists in the definition and management of requirements. Uses standard techniques to elicit, specify, and document requirements for simple subject areas with clearly-defined boundaries. Assists in the creation of a requirements baseline and in investigating and applying authorised requests for changes to base-lined requirements, in line with change management policy.

Delivery and Operation

Availability management : Contributes to the availability management process and its operation and performs defined availability management tasks. Analyses service and component availability, reliability, maintainability and serviceability. Ensures that services and components meet and continue to meet all of their agreed performance targets and service levels. Implements arrangements for disaster recovery and documents recovery procedures. Conducts testing of recovery procedures.

Service acceptance : Engages with project management to confirm that products developed meet the service acceptance criteria and are to the required standard. Feeds into change management processes.

Configuration management : Applies tools, techniques and processes to track, log and correct information related to configuration items. Verifies and approves changes ensuring protection of assets and components from unauthorised change, diversion and inappropriate use. Ensures that users comply with identification standards for object types, environments, processes, lifecycles, documentation, versions, formats, baselines, releases and templates. Performs audits to check the accuracy of information and undertakes any necessary corrective action under direction.

Asset management : Applies tools, techniques and processes to create and maintain an accurate asset register. Produces reports and analysis to support asset management activities and aid decision making.

Change management : Develops implementation plans for complex requests for change. Evaluates risks to the integrity of service environment inherent in proposed implementations (including availability, performance, security and compliance of the business services impacted). Seeks authority for those activities, reviews the effectiveness of change implementation, and suggests improvement to organisational procedures governing change management. Leads the assessment, analysis, development, documentation and implementation of changes based on requests for change.

Security administration : Investigates minor security breaches in accordance with established procedures. Assists users in defining their access rights and privileges. Performs non-standard security administration tasks and resolves security administration issues.

Application support : Drafts and maintains procedures and documentation for applications support. Manages application enhancements to improve business performance. Advises on application security, licensing, upgrades, backups, and disaster recovery needs. Ensures that all requests for support are dealt with according to set standards and procedures.

Problem management : Ensures that appropriate action is taken to anticipate, investigate and resolve problems in systems and services. Ensures that such problems are fully documented within the relevant reporting system(s). Enables development of problem solutions. Coordinates the implementation of agreed remedies and preventative measures. Analyses patterns and trends.

Incident management : Ensures that incidents are handled according to agreed procedures. Investigates escalated incidents to responsible service owners and seeks resolution. Facilitates recovery, following resolution of incidents. Ensures that resolved incidents are properly documented and closed. Analyses cause of incidents and informs service owners in order to minimise probability of recurrence, and contribute to service improvement. Analyses metrics and reports on performance of incident management process.

Skills and quality

Quality assurance : Contributes to the collection of evidence and the conduct of formal audits or reviews of activities, processes, data, products or services. Examines records for evidence that appropriate testing and other quality control activities have taken place and determines compliance with organisational directives, standards and procedures. Identifies non-compliances, non-conformances and abnormal occurrences.

Conformance review : Collects and collates evidence as part of a formally conducted and planned review of activities, processes, products or services. Examines records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.

Digital forensics : Contributes to digital forensic investigations. Processes and analyses evidence in line with policy, standards and guidelines and supports production of forensics findings and reports.

Relationships and Engagement

Relationship management : Identifies the communications and relationship needs of stakeholder groups. Translates communications / stakeholder engagement strategies into specific activities and deliverables. Facilitates open communication and discussion between stakeholders, acting as a single point of contact by developing, maintaining and working to stakeholder engagement strategies and plans. Provides informed feedback to assess and promote understanding. Facilitates business decision-making processes. Captures and disseminates technical and business information.

Your skills and experience

How we’ll support you