Manager - Regulatory Reporting & Info Security.Regulatory Reporting(Credit).International Banking Group

• Responsible for managing and providing independent oversight of Risk Management, Regulatory Reporting and Information Security activities, ensuring effective governance, timely regulatory compliance, proactive identification and management of risks, robust security controls, and appropriate management reporting and escalation.”
• Manage and own all country Risk and Information Security related routine and ad hoc reporting to Qatar Central Bank and Qatar Credit Bureau. The person will work with in-country stakeholders as well as HO (MIT, Finance & CAD, Risk) to ensure timely and accurate reporting.
• Identify and contribute towards achieving and maximizing the business profitability by ensuring the availability of the detailed credit analysis of the different products in CIBG.
• Ensure that the mandatory required reporting to the Qatar Central Bank (QCB) & Credit Bureau (CB) are in Place.
• Assist and enable the local CISO in executing Mashreq’s bank wide and local information security program.
• Assist in safeguarding the bank’s digital assets and ensuring compliance with local and global regulatory requirements related to information security.

1. Risk Management & Regulatory Reporting

Manage and oversee the timely preparation, review and submission of all regulatory reports, including Central Bank, Credit Bureau and other applicable regulatory submissions, ensuring accuracy, completeness and compliance with regulatory requirements.

• Ensure compliance with applicable Risk Management regulations, guidelines, policies and reporting requirements, and coordinate implementation of new or revised regulatory requirements with relevant stakeholders.
• Ensure regulatory and risk reports are appropriately reconciled with the relevant source systems, with discrepancies identified, investigated, escalated and remediated on a timely basis.
• Provide oversight of Credit Bureau disputes and customer complaints relating to reporting deficiencies, ensuring appropriate investigation, resolution and implementation of corrective measures to prevent recurrence.
• Coordinate with business units and relevant functions across the Bank to improve the accuracy, completeness and integrity of customer and portfolio data used for regulatory and management reporting.
• Develop and enhance Management Information (MI), KRIs/KPIs, dashboards and portfolio reporting, including regular and ad hoc analysis, to provide management with timely visibility of risk exposures, trends, exceptions and emerging concerns.
• Perform ongoing review and analysis of the Bank's asset portfolio through effective MIS, identifying material trends, concentrations, exceptions and areas requiring management attention.
• Ensure Management Exception Reports (MER) and other applicable risk exceptions are accurately recorded, monitored and reported within established timelines, with appropriate follow-up and escalation.
• Manage and monitor regulatory, risk, audit and assurance findings and commitments, ensuring clear ownership, appropriate remediation plans, adequate supporting evidence and timely closure.
• Provide independent review and challenge of risk assessments, control gaps, exceptions and remediation plans, escalating material or overdue exposures to senior management where required.
• Work closely with Technology and other stakeholders to enhance data and reporting capabilities, improve data quality, enable effective multidimensional analysis, address system-related issues and streamline regulatory and management reporting.
• Drive system and process improvements to improve efficiency, automation, accuracy and control within Risk Management and regulatory reporting activities, including initiation and coordination of required system enhancements.
• Develop, review and maintain relevant Standard Operating Procedures (SOPs), processes and controls, ensuring they remain aligned with regulatory, policy and operational requirements.
• Oversee implementation and monitoring of approved Risk Management action plans, controls, initiatives and remedial measures, ensuring appropriate governance and timely escalation of delays.
• Prepare and present Risk Management and regulatory reporting updates to senior management and relevant governance forums, highlighting significant risks, regulatory matters, trends, exceptions and required management decisions.
• Drive continuous improvement in Risk Management governance and regulatory reporting, strengthening data quality, control effectiveness, accountability and overall reporting efficiency.

2. Information Security Management:

• Manage and oversee the execution of the Information Security Group (ISG) operating model at country level, ensuring alignment with Group Information Security requirements, local regulatory requirements and internal policies and standards.
• Provide country-level governance and oversight of Information Security risks and controls, ensuring significant security risks, control gaps, exceptions and non-compliance are appropriately assessed, documented, remediated and escalated.
• Review Information Security-related changes and provide appropriate risk review, challenge and approval/rejection in accordance with applicable Information Security standards and governance requirements.
• Assess the adequacy and effectiveness of Information Security controls in meeting applicable regulatory, policy and Risk Management requirements, and monitor remediation of identified control deficiencies.
• Provide oversight of cyber and technology risk assessments relating to systems, applications, infrastructure, projects, new technology initiatives and material technology changes.
• Oversee vulnerability assessments, security assessments and related remediation activities, ensuring significant vulnerabilities and control deficiencies are appropriately prioritized, assigned, monitored and tracked to closure.
• Provide Information Security risk oversight of third parties, outsourced services and cloud solutions, including security due diligence, risk assessments, control reviews and monitoring of identified remediation actions.
• Collaborate with ISG, Technology, Procurement, Finance, Administration and other relevant stakeholders to assess security and technology compliance and coordinate regulatory requirements, including preparation and submission of the Annual Technology Register to Qatar Central Bank.
• Support the CISO in developing and monitoring Information Security metrics, KRIs/KPIs and management dashboards, highlighting material security exposures, control deficiencies, significant breaches and remediation status.
• Support the CISO in conducting Security Forums and other governance committees by consolidating Information Security posture, risk, incident, vulnerability, compliance and remediation information for management review and decision-making.
• Lead and coordinate the country’s response to significant Information Security incidents, working with relevant stakeholders to assess business and regulatory impact, ensure appropriate escalation to management and support decisions regarding regulatory notification/reporting.
• Monitor Information Security incidents, risks, exceptions and remediation actions, ensuring appropriate ownership, timely resolution and escalation of significant or overdue matters.
• Coordinate Information Security matters arising from regulatory reviews, Internal/External Audit and independent assurance assessments, including responses, remediation plans and supporting evidence for closure.
• Monitor emerging cyber and Information Security risks and recurring control weaknesses, assessing their potential impact and escalating material concerns to the CISO and relevant management forums.
• Provide risk-based Information Security advice and challenge to Technology and business stakeholders for new systems, digital initiatives, projects, outsourcing arrangements and significant technology changes.
• Promote Information Security awareness and training across the Bank, reinforcing employee understanding of security responsibilities, secure practices and protection of organizational and customer information.
• Drive continuous improvement in the country's Information Security control environment, working with relevant stakeholders to strengthen governance, monitoring, risk management and regulatory compliance.

3. ESG

• Lead and coordinate the Bank’s implementation of QCB ESG Supervisory Principles and applicable sustainability requirements, including regulatory gap assessments, ESG risk integration, governance, data and reporting, risk appetite, stress testing/scenario analysis, disclosures and regulatory evidence management.
• Coordinate periodic ESG management reporting and regulatory submissions, monitor implementation milestones and remediation plans, and facilitate ESG integration across the three lines of defense.
• Support implementation of QCB’s Sustainability Reporting Framework and applicable ISSB-aligned reporting requirements, ensuring appropriate governance, data quality, documentation and stakeholder coordination

• 5-10 years banking experience out of which minimum 3-5 years in Risk Management MI & reporting. Comprehensive knowledge of general banking activities, Local and International practices on Credit Risk reporting.
• Excellent knowledge of MS Excel / SQL / Data warehousing tool. Knowledge of analytical tools / software such as SAS / SPSS or equivalent.
• Ability to coordinate multiple projects/tasks.
• Graduate with thorough knowledge of Credit
• Conversant with operating systems, and data warehouse.
• Strong inter-personal, problem solving, communication, analytical skills including PC Skill.
• Conversant with operating systems, Financial, EDMS, Credit System, Cards Systems.
• Full awareness about Compliance/Regulatory requirements
• Minimum 3-5 of experience in Information security including governance, policy procedures, security incident response, security management etc.
• Knowledge of Banking environment and international compliance including PCI DSS, SWIFT CSP, GDPR etc.
• Any Professional security certifications from both Security and Risk Management are desirable.
• Team Player