Technology Risk and Control

Position Summary

APAC Technology Risk is a senior role responsible for driving risk management, regulatory engagement, and audit governance across enterprise technology and banking applications in the APAC region. The role ensures robust control frameworks, audit readiness, and compliance with global and regional regulatory requirements in a highly regulated financial environment.

This position requires end-to-end ownership of risk and control activities, strong stakeholder management, and the ability to lead complex audits, regulatory exams, and remediation programs across multiple jurisdictions.

Key Responsibilities

• Lead APAC participation in regulatory exams, internal and external audits, surveys, and targeted risk assessments
• Manage audit and regulatory engagements end-to-end, ensuring adherence to governance standards, timelines, and quality expectations
• Own and drive risk and control lifecycle management, including:
• Audit findings and issue remediation
• Risk acceptance and renewal processes
• Extended remediation plans and control improvements
• Application and technology risk mitigation
• Act as the primary regional point of contact for risk and controls across Technology, Finance, Compliance, Information Security, Audit, and global stakeholders
• Oversee regulatory compliance with regional authorities (e.g., MAS, RBI, HKMA, etc.) and ensure alignment with internal policies, standards, and frameworks
• Conduct and manage technology risk assessments, including Business Criticality Assessments (BCA) and Technology Risk Management (TRM) reviews
• Facilitate control testing activities (technical, administrative, and physical controls) and coordinate evidence collection, validation, and submission
• Drive risk governance and reporting, providing clear and concise updates to senior leadership on risk posture, emerging issues, and remediation progress
• Support ISO audits and quality assurance programs, including certification, documentation, and compliance reviews
• Promote and embed a strong risk and control culture across technology teams and business functions

Required Qualifications

• 4+ years of experience in Technology Risk, IT Audit, Compliance, or Governance within financial services or large enterprise environments
• Strong expertise in audit management, regulatory engagement, and risk assessment frameworks
• Proven experience in end-to-end audit/exam coordination and issue remediation
• Solid understanding of IT Service Management (ITIL) processes including Incident, Problem, and Change Management
• Hands-on experience with control testing and risk evaluation across technical and non-technical domains
• Excellent analytical, problem-solving, and organizational skills with strong attention to detail
• Strong communication and stakeholder management skills, with the ability to engage senior leadership
• Ability to work in fast-paced, high-pressure, and regulatory-driven environments

Preferred Qualifications

• Experience in banking or financial services technology environments, particularly Core Banking systems
• Professional certifications such as:
• CISA (Certified Information Systems Auditor)
• ISO/IEC 20000 Auditor
• ITIL Certification
• Scrum Master or Agile certifications
• Familiarity with regional regulatory frameworks (MAS TRM, FCA requirements, etc.)
• Experience in ISO audits (ISO 9000 / ISO 20000) and quality assurance programs
• Demonstrated leadership in large-scale transformation programs and regulatory remediation initiatives
• Strong ability to influence cross-functional teams and drive strategic risk initiatives

Kindly share me your CV: [Confidential Information]