About the Role

An established financial institution is seeking an IT Risk & Cyber Security Governance Senior Officer to support technology risk management, cyber security governance, regulatory compliance, and vendor risk activities.

This role offers strong exposure to banking technology governance, MAS regulatory requirements, audit management, and cyber security controls within a structured and highly regulated environment.

Key Responsibilities

Technology Risk & Governance

Support the execution and enhancement of the organization's IT Risk Management framework.
Maintain risk registers, governance documentation, policies, procedures, and management reporting.
Perform gap assessments against regulatory requirements and track remediation actions.
Ensure technology controls are properly documented and audit-ready.

Cyber Security & Compliance

Monitor and review IT security controls, including access management, vulnerability management and segregation of duties.
Support cyber security assessments, risk reviews and awareness initiatives.
Coordinate cyber exercises and governance activities with regional and global stakeholders.

Vendor Risk Management

Conduct vendor due diligence and outsourcing risk reviews.
Monitor vendor performance, SLA compliance and contract obligations.
Review third-party risk assessments and recommend improvements where necessary.

Audit & Regulatory Support

Support internal and external audits, compliance reviews and regulatory inspections.
Prepare evidence, reports and documentation for audit and regulatory requirements.
Liaise with auditors, regulators and internal stakeholders on technology risk matters.

Requirements

Essential

Diploma or Degree in Information Technology, Cyber Security or a related discipline.
Minimum 3 years of experience in:
- IT Risk
- IT Audit
- Cyber Security Governance
- Technology Risk Management
Experience working within banking, financial services or other regulated industries.
Familiarity with one or more of the following:
- MAS TRM
- ISO 27001
- NIST CSF
- SWIFT CSP
- SOC 2
Strong documentation, reporting and stakeholder management skills.
Good understanding of IT infrastructure, access controls and security controls.

Preferred

Experience supporting audits, regulatory inspections or compliance reviews.
Exposure to vendor governance and outsourcing risk management.
Japanese language capability is advantageous but not mandatory.

Suitable Backgrounds

IT Risk Analyst
Technology Risk Officer
IT Governance Specialist
Cyber Security Governance Analyst
IT Auditor
IT Controls Analyst
Information Security Governance Officer
Technology Risk & Compliance Analyst
Cyber Risk Analyst
Technology Governance Officer

IT Risk and Cyber Security Governance Senior Officer