IT Risk and Cyber Security Governance Senior Officer

About the Role

An established financial institution is seeking an IT Risk & Cyber Security Governance Senior Officer to support technology risk management, cyber security governance, regulatory compliance, and vendor risk activities.

This role offers strong exposure to banking technology governance, MAS regulatory requirements, audit management, and cyber security controls within a structured and highly regulated environment.

Key Responsibilities

Technology Risk & Governance

• Support the execution and enhancement of the organization's IT Risk Management framework.

• Maintain risk registers, governance documentation, policies, procedures, and management reporting.

• Perform gap assessments against regulatory requirements and track remediation actions.

• Ensure technology controls are properly documented and audit-ready.

Cyber Security & Compliance

• Monitor and review IT security controls, including access management, vulnerability management and segregation of duties.

• Support cyber security assessments, risk reviews and awareness initiatives.

• Coordinate cyber exercises and governance activities with regional and global stakeholders.

Vendor Risk Management

• Conduct vendor due diligence and outsourcing risk reviews.

• Monitor vendor performance, SLA compliance and contract obligations.

• Review third-party risk assessments and recommend improvements where necessary.

Audit & Regulatory Support

• Support internal and external audits, compliance reviews and regulatory inspections.

• Prepare evidence, reports and documentation for audit and regulatory requirements.

• Liaise with auditors, regulators and internal stakeholders on technology risk matters.

Requirements

Essential

• Diploma or Degree in Information Technology, Cyber Security or a related discipline.

• Minimum 3 years of experience in:

  • IT Risk

  • IT Audit

  • Cyber Security Governance

  • Technology Risk Management

• Experience working within banking, financial services or other regulated industries.

• Familiarity with one or more of the following:

  • MAS TRM

  • ISO 27001

  • NIST CSF

  • SWIFT CSP

  • SOC 2

• Strong documentation, reporting and stakeholder management skills.

• Good understanding of IT infrastructure, access controls and security controls.

Preferred

• Experience supporting audits, regulatory inspections or compliance reviews.

• Exposure to vendor governance and outsourcing risk management.

• Japanese language capability is advantageous but not mandatory.

Suitable Backgrounds

• IT Risk Analyst

• Technology Risk Officer

• IT Governance Specialist

• Cyber Security Governance Analyst

• IT Auditor

• IT Controls Analyst

• Information Security Governance Officer

• Technology Risk & Compliance Analyst

• Cyber Risk Analyst

• Technology Governance Officer