Program Manager: IMT Risk Management, Compliance, and Policy

World Bank Group Context

Innovation and partnership bond the five institutions of the World Bank Group (WBG): the International Bank for Reconstruction and Development (IBRD) and the International Development Association (IDA), which together form the World Bank; the International Finance Corporation (IFC); the Multilateral Investment Guarantee Agency (MIGA); and the International Centre for Settlement of Investment Disputes (ICSID). The World Bank Group is one of the world’s largest sources of funding and knowledge for developing countries. It uses financial resources and extensive experience to help our client countries to reduce poverty, increase economic growth, and improve quality of life. To ensure that countries can access the best global expertise and help generate cutting-edge knowledge, the World Bank Group is constantly seeking to improve the way it works. Key priorities include delivering measurable results, promoting openness and transparency in development, and improving access to development information and data.

Vice Presidency Context

The Information Management Technology (IMT) Vice Presidency is the World Bank’s central function for the provision of information and technology services to the Bank’s business units. The overarching objective of this function is to ensure that end-users have the information and systems to do their jobs at all locations where Bank business is being done. The management of most of the end-user IT services, business solutions and the underlying technology infrastructure is centralized with IMT. IMT is structured in a federated operating model with separate dedicated application development and management departments for each of the three Bank business lines: Operations and Knowledge, Finance Complex, and Corporate Functions which also supports MIGA and ICSID. Each of business line application departments is lead by a CIO who works closely with a business line governance group to align the systems investment portfolio with the business priorities. Shared services of underlying infrastructure and applications platforms are provided by the Enterprise Architecture unit and the Technology Engineering and Infrastructure department. IMT also provides shared services to IFC.

The World Bank has adopted a three-year IMT Strategy that is centered on seizing value opportunities; creating agile delivery capacity; promoting standards; managing risks; and transforming the IMT Organization. Front office functions including strategy and outreach, innovation, budget, program management, information security, and risk management provide the enabling authorizing environment and control processes to help the IMT service and project managers meet the goals of the IMT strategy efficiently and effectively.

Unit Context

The Head of Risk Management of the IMT Risk Management, Compliance, and Policy unit. This unit has the overall responsibility to implement and operationalize the IT Risk Management Framework across the WBG IMT, manage the IMT Risk and Service Management Program and Committee, implement an integrated approach for the Internal Controls over Financial Reporting (ICFR) teams for one Bank IMT ICFR, address process, risk and control issues with a focus on continuous improvement, maintain an IMT view of the internal audit work program and findings, and manage the implementation of the IMT Policy Framework. He/she will be expected to work with all other IMT Units in the Bank in fulfilling the tasks pertaining to the above areas.

An opportunity exists within IMT for a Head of Risk Management and will report directly to the CIO with a matrix reporting relationship to the WBG Chief Risk Officer. The candidate will work in a complementary fashion with the CIO with an emphasis on building a robust risk management function covering the areas of ‘Control & Compliance’ and ‘Quality Management. The first area will coordinate all internal and external audit reviews and follow-ups, and will ensure compliance with related Corporate guidelines. The second area will introduce and expand best practices in relation to the delivery of sound IT investments.

The position required a broad, cross-functional perspective to ensure that sound management best practices are enforced across all applications, business processes, IT development and maintenance procedures. The candidate will actively take on a key role in managing risk, including support for, and enforcement of, technical requirements related to existing and emerging operational control and compliance. S/He must also have a combination of technical understanding, management insight, and pragmatism to take stock on in-house situations and make improvements in a decisive and objective manner.

This job requires that the candidate have:

(i) a mature understanding of IT state of the art and practice in a global, decentralized institution;

(ii) up-to-date, best practice experience with SDLC, infrastructure and policies related to technology, and

(iii) a robust, cross-functional perspective to lead the RMCP functions including risk awareness and compliance assessment, independent validation and verification, audit facilitation and response and coordinating the development of policies, procedures, documents and standards that meet internal and external requirements.

Note: If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 4 year term appointment.

Program Manager: IMT Risk Management, Compliance, and Policy