We are looking for an experienced Technology Risk &Governance professional to join our banking client. This role is responsible for overseeing technology risks, strengthening governance frameworks, and ensuring compliance with internal policies and regulatory requirements. The successful candidate will work closely with IT, security, audit, and business teams to identify, assess, and manage technology risks across systems and platforms.
Key Responsibilities
- Develop, maintain, and enhance the bank's technology risk management framework, policies, and standards in alignment with MAS TRM Guidelines
- Lead and oversee Risk & Control Self-Assessments (RCSA) for technology processes, platforms, and cloud environments
- Review and challenge first-line risk assessments for new products, digital initiatives, cloud and third-party engagements
- Ensure compliance with MAS TRM, Outsourcing Guidelines, PDPA, and other relevant regulations
- Manage technology risk issues, control gaps, and remediation plans, ensuring timely and sustainable closure
- Coordinate regulatory examinations, internal audits, and external audits on technology risk matters
- Prepare and present risk reports, dashboards, and key risk indicators (KRIs) to senior management and board committees
- Provide risk advisory on emerging technologies including cloud, AI/ML, DevSecOps, and quantum computing
Key Requirements
- Minimum 10 years of experience in technology risk, IT audit, compliance, or governance roles within the banking or financial services industry
- Strong knowledge of MAS Technology Risk Management (TRM) Guidelines, Outsourcing Guidelines, and PDPA
- Familiarity with industry standards and frameworks such as NIST, ISO 27001, COBIT, and ITIL
- Experience in RCSA, issue management, control testing, and risk reporting
- Understanding of new technology risk management
- Excellent communication and stakeholder management skills, with ability to challenge first-line effectively
- Strong analytical, problem-solving, and critical thinking abilities
- Certifications preferred: CISA, CRISC, CISM, or CISSP
- Bachelor's degree in Computer Science, Information Technology, Information Security, or related field
Interested candidates please email your latest resume to [Confidential Information]
EA License: R1108479 | EA Registration 25C2690
