Enterprise Risk / Operational Risk (Listed FI; ERM; 3rd Party Risk)

Lico Resources is partnering with a prominent listed financial institution at the heart of Singapore's financial sector. This organisation is well established and highly regarded within its sector, and is committed to upholding the highest standards of enterprise and third-party risk management.

A unique opportunity has arisen for a seasoned and influential risk professional to join the Operational/Enterprise Risk team in a highly visible role. This position offers broad exposure to group-wide operations and senior stakeholders, contributing directly to the effectiveness of the enterprise and third-party risk frameworks across critical business and support functions. The successful candidate will operate as a subject matter expert, shaping methodology and providing thought leadership across the second line of defence.

Key Responsibilities

• Lead the enhancement and implementation of the enterprise risk management (ERM) framework in alignment with global standards
• Lead the facilitation of Risk and Control Self-Assessments (RCSA) with various business units; maintain central risk registers, control inventories, and the third-party risk register.
• Own and mature the third-party and outsourcing risk management framework, including vendor due diligence, risk-based segmentation, ongoing monitoring, contractual risk provisions, and exit/contingency planning.
• Assess third-party and outsourcing risks across the full vendor lifecycle in line with MAS Guidelines on Outsourcing and operational resilience expectations, including evaluation of material/critical arrangements, concentration risk, and fourth-party (subcontractor) exposure.
• Prepare materials and coordinate inputs for senior governance forums, including Board-level risk and audit committees.
• Perform and document assessments of inherent and residual risks, control effectiveness, and ensure timely closure of action plans.
• Investigate operational and third-party risk incidents, perform root cause analysis, and track remediation actions to prevent recurrence.
• Develop and maintain dashboards, risk appetite indicators, third-party KRIs, and emerging risk summaries for executive reporting.
• Support enterprise-wide change initiatives by evaluating risk implications of new processes, technologies, services, and vendor engagements.
• Provide input into product and service risk assessments, particularly for new or significantly altered offerings and associated outsourcing arrangements.
• Collaborate with resilience and technology teams to integrate enterprise and third-party risk perspectives into testing outcomes, recovery planning, and critical dependency mapping.
• Coordinate responses to regulatory reviews, audits, and internal assurance exercises, ensuring follow-through on recommendations.
• Ensure data quality and consistency across GRC systems; support workflow optimisation through process and tool enhancements.
• Deliver targeted risk training sessions, mentor junior team members, and facilitate awareness-building engagements across the organisation.

Qualifications & Experience

Essential:

• A recognised Bachelor's degree in Finance, Business, Engineering, Information Systems, or a related discipline.
• At least 7 years relevant experience in enterprise risk, operational risk, third-party/outsourcing risk, internal audit, or control functions within financial services or market infrastructure environments.
• Strong grasp of ERM practices including RCSA, KRIs, risk appetite frameworks, incident analysis, and regulatory expectations (especially MAS guidelines, including outsourcing and operational resilience requirements).
• Demonstrated experience designing or maturing third-party / vendor risk management frameworks across the vendor lifecycle.
• Excellent communication and analytical skills, with the ability to produce concise, insightful reports for executive and Board audiences.
• Adept at working across functions and facilitating risk workshops with senior stakeholders from varied disciplines.
• Proficient in Microsoft Excel and PowerPoint; working knowledge of GRC platforms (e.g., Archer, ServiceNow GRC) is beneficial.

Preferred:

• Exposure to data visualisation tools such as Power BI or Tableau.
• Professional certifications such as FRM, PRM, CRM, CIA, CISA, CTPRP, or equivalent.

Personal Attributes

• Highly accountable, with a proactive and structured approach to execution.
• Calm and dependable in fast-paced, regulatory-driven environments.
• Team-oriented with strong influencing, leadership, and relationship-building skills.
• Upholds high standards of integrity and sound judgment, aligned with the organisation's role in maintaining market confidence.

If you are interested in this role, please send us your updated resume today to [email protected] quoting reference number A09012. Please note that only shortlisted candidates will be notified.

"Data provided is for recruitment purposes only."

Job Reference No: A09012EA Licence No.: 13C6733EA Registration No.: R1333454