We are seeking a seasoned Vice President, Infrastructure & Cloud Risk to join our client's second line of defence (2LoD) Technology Risk function. The successful candidate will provide independent oversight and effective challenge across infrastructure, cloud, and related technology domains, ensuring that risks are properly identified, managed, and reported in alignment with the firm's risk appetite and regulatory obligations.
This is a strategic role, requiring a strong mix of technical expertise, risk management acumen, and stakeholder influence skills to partner with senior leaders across Technology and Risk.
Key Responsibilities
2LoD Risk Oversight
- Provide independent oversight and challenge of 1LoD Infrastructure & Cloud Technology activities, including data centres, networks, endpoints, cloud platforms, and hybrid environments.
- Review and assess key technology risks, controls, and mitigation strategies, ensuring alignment with risk appetite.
- Contribute to the development and enhancement of the IT risk management framework, standards, and methodologies.
Cloud Risk Management
- Lead the oversight of cloud adoption, migrations, and ongoing operations across public, private, and hybrid environments.
- Evaluate risks related to cloud governance, shared responsibility models, security, resilience, and third-party service providers.
- Assess adequacy of controls around cloud access, data protection
Infrastructure & Operations Risk
- Monitor risks across infrastructure domains (e.g., data centres, servers, storage, networks, disaster recovery, service management).
- Provide assurance and challenge on resilience, capacity management, patching, vulnerability management, and incident response.
- Partner with 1LoD on key incident reviews and post-mortems, ensuring lessons learned are embedded.
Governance, Reporting & Stakeholder Engagement
- Produce risk insights, dashboards, and thematic reports for senior management and governance committees.
- Engage and influence senior stakeholders in Technology, Risk, Audit, and Business Units to drive strong risk culture and accountability.
- Support regulatory and audit interactions related to technology and cloud risk.
Requirements
- Bachelor's degree in Computer Science, Information Systems, Engineering, or related discipline; professional certifications (CISM, CISSP, CRISC, CCSP, CCAK) are advantageous.
- 12-15 years of experience in technology infrastructure and cloud risk management
- Strong understanding of cloud service models (IaaS, PaaS, SaaS), major providers (AWS, Azure, GCP), and associated risk frameworks.
- Knowledge of infrastructure and operational risk areas such as DR, business continuity, cyber resilience, service management, and technology operations.
- Excellent stakeholder management skills, with the ability to challenge constructively and influence outcomes at senior levels.
- Strong analytical, communication, and reporting skills; ability to distil complex risk issues into actionable insights.
To apply:
If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.
Reg: R1876389
Lic: 16S8060
