The Information Technology (IT) Risk and Cyber Security Governance Senior Officer role supports technology risk management, cyber security governance, regulatory compliance, and vendor risk activities within an established financial institution. Based in Singapore with a hybrid working arrangement, the position offers broad exposure to banking technology governance, Monetary Authority of Singapore (MAS) regulatory requirements, audit management, and cyber security controls within a structured and highly regulated environment.
Responsibilities
- Technology Risk & Governance
- Support the execution and enhancement of the organisation's IT Risk Management framework
- Maintain risk registers, governance documentation, policies, procedures, and management reporting
- Perform gap assessments against regulatory requirements and track remediation actions
- Ensure technology controls are properly documented and audit-ready
- Cyber Security & Compliance
- Monitor and review IT security controls, including access management, vulnerability management, and segregation of duties
- Support cyber security assessments, risk reviews, and awareness initiatives
- Coordinate cyber exercises and governance activities with regional and global stakeholders
- Vendor Risk Management
- Conduct vendor due diligence and outsourcing risk reviews
- Monitor vendor performance, Service Level Agreement (SLA) compliance, and contract obligations
- Review third-party risk assessments and recommend improvements where necessary
- Audit & Regulatory Support
- Support internal and external audits, compliance reviews, and regulatory inspections
- Prepare evidence, reports, and documentation for audit and regulatory requirements
- Liaise with auditors, regulators, and internal stakeholders on technology risk matters
Requirements
- Diploma or degree in information technology, cyber security, or a related discipline
- Minimum 3 years of experience in one or more of the following areas:
- IT risk
- IT audit
- Cyber security governance
- Technology risk management
- Experience working within banking, financial services, or other regulated industries
- Familiarity with one or more of the following:
- MAS Technology Risk Management (TRM)
- ISO 27001
- NIST CSF
- SWIFT CSP
- SOC 2
- Strong documentation, reporting, and stakeholder management skills
- Good understanding of IT infrastructure, access controls, and security controls
- Preferred qualifications:
- Experience supporting audits, regulatory inspections, or compliance reviews
- Exposure to vendor governance and outsourcing risk management
- Japanese language capability is advantageous but not mandatory
- Relevant professional backgrounds include:
- IT Risk Analyst
- Technology Risk Officer
- IT Governance Specialist
- Cyber Security Governance Analyst
- IT Auditor
- IT Controls Analyst
- Information Security Governance Officer
- Technology Risk & Compliance Analyst
- Cyber Risk Analyst
- Technology Governance Officer
Additional information
- Why Join
- Exposure to banking technology risk and regulatory governance
- Strong focus on MAS compliance and cyber security governance
- Opportunities to work with regional and global stakeholders
- Stable, structured, and highly regulated environment
- Broad exposure across technology risk, vendor governance, audit, and compliance functions
About the company
A company operating in the financial services industry with an established presence in Singapore. The organisation operates within a structured and highly regulated environment, supporting a broad range of activities across its business.
JAC Recruitment Pte. Ltd.
EA Licence: 90C3026
EA Personnel Name: Jaspreet Kaur Sran
EA Personnel: R22109724
