Job description:

Position Summary

This role, as a second line-of-defence, is required to work with first line-of-defence functions to identify, assess, monitor and report key IT risks. This role is also required to work closely with divisions/functions to understand and document controls and identify potential areas of improvement. Experience in IT and Cybersecurity Risk management is necessary, with good communication and written skills.

Key Responsibilities

Support in the implementation and operation of the IT risk management framework, policies, processes, and procedures
Assist in the identification, prioritisation, assessment, monitoring and reporting of key IT risks
Conduct risk and controls self-assessment (RCSA), operational loss event reporting, assess risk control adequacy and effectiveness
Monitor and report risk tolerances and key risk indicators
Support incident risk management and escalation, IT risk-related projects and/or initiatives
Assist in the conduct of risk committee meetings, risk awareness training and workshop for staff
Maintain a trusted and collaborative relationship with stakeholders, to promote risk awareness and resiliency

Requirements

7 to 10 years of experience in IT Risk including ITDR/Business Continuity and Resiliency; experience in a regulated financial industry
Experience in IT operations, Internal/IT Audit and relevant risk certifications (e.g. ITIL, CISSP, CRISC) is an added advantage
Knowledge of current regulatory requirements in Singapore and industry best practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, Cyber Security Code of Practice for Critical Information Infrastructure, FSM-N13, FSM-14)
Good working knowledge of risk management and control concepts, constantly paying attention to details and ability to perform deep-dive investigation
Good stakeholder management and collaboration skills
Strong and effective written and verbal communication skills in English is a must
Highly motivated and has a strong desire to learn and succeed
Excellent problem-solving skills, ability to prioritize, multi-task and handle tight deadlines
Proactive team player with ability to work independently with minimal supervision

IT Risk Specialist