Senior Mgr, Cyber Risk & Compliance

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 13,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

As a Senior Manager (Cyber Risk & Compliance), you'll be responsible for providing technical support, strengthening IT governance and operational effectiveness by ensuring that IT policies, processes, and controls are consistently reviewed, updated, and aligned with industry's best practices. This position involves identifying gaps, risks, and opportunities for improvement in IT operations, service desk performance, and user experience, while providing advisory support to enhance overall IT service quality. The role also manages IT-related audits, collaborates with stakeholders to implement remediation measures, and ensures continuous monitoring through meaningful KPIs and KRIs. A key expectation of the position is to drive process enhancements, foster innovation, and leverage automation to improve efficiency, compliance, and user satisfaction.

What will you do

• Regularly review and update existing IT policies and procedures to ensure they remain effective, relevant, and aligned with industry best practices.
• Identify, evaluate, and report IT risks, and work with stakeholders to implement mitigation measures.
• Review whether IT has implemented sufficient controls to address monitoring, performance tracking and to assess user experience and gather feedback.
• Identify gaps or improvement opportunities in service desk operations and recommend enhancements to improve support quality and efficiency.
• Review IT processes and procedures to identify potential gaps or areas for improvement.
• Propose technical or process changes to address identified gaps and provide advisory support to Line 1 on how such changes should be implemented.
• Conduct assessments on IT operational controls to uncover non-compliance to the policies and processes.
• Collaborate with internal stakeholders to implement process enhancements and address identified gaps.
• Manage IT-related audits conducted by internal or external auditors, including reviewing evidence provided by Line 1 during audits.
• Communicate audit findings to respective stakeholders, determine root causes, develop action plans, and verify that remedial measures are effectively implemented.
• Assess existing IT KPIs and KRIs for completeness and relevance.
• Prepare regular reports on IT KPIs, KRIs, and other operational metrics - such as patching, system performance, capacity, availability, user experience, security agents, vulnerability management, etc. for management review.
• Demonstrate the ability to innovate and automate processes where appropriate.

The ideal candidate should possess:

• Degree/Diploma or higher in Information Technology, Information Systems or equivalent
• Certification such as AWS/Azure administrator certified, Microsoft 365 certified, Microsoft Windows certified, CCNA certified is preferred
• Minimum 10-12 years of experience in IT governance with at least 5 years of experience specifically handling IT audits, risk and compliance, in an IT control function
• Experience in IT governance, IT audit, IT regulatory compliance who are keen to explore a career in IT risk management
• Strong knowledge of IT operational, technical and process controls
• Ability to provide technical advisory on IT operational controls, including monitoring, patch management, vulnerability management, system performance, and service desk operations.
• Hands-on understanding of how IT controls should be implemented, with the ability to guide Line-1 team on remediation approaches.
• Experience in facing external auditors
• Strong writing, communication and interpersonal skills
• Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
• Due to government project sensitivity, we will only consider Singapore Citizen

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity-and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.