SA/AVP, Technology Risk Management as a 2nd LoD function
Role Purpose
Support the implementation and operation of the regional APD/ID Technology Risk Management Framework as an independent Second Line of Defence function. The role provides risk oversight, challenge and management reporting, supported by strong data-analysis, stakeholder management and reporting-automation skills.
Job Responsibilities
Operationalize and maintain the regional Technology Risk Management Framework, policies, procedures and standards.
Assess, monitor and report material technology, cyber, resilience and regulatory risks across APD/ID offices.
Review and challenge LoD1 and LoD1.5 risk assessments, controls, incidents, issues, risk acceptances and remediation plans.
Review existing KRIs and develop objective risk indicators were justified by regulation or a material risk gap.
Support oversight of critical systems, vulnerabilities, technology changes, recovery readiness and ageing technology.
Coordinate with IT Dept, branches, Head Office, Compliance, Internal Audit and other risk functions.
Support Compliance on regulatory gap assessments and tracking of implementation of new technology-risk requirements.
Collaborate with other risk teams to assess Technology Risk in the context of Enterprise Risk, Operational Risk, Operational Resilience, BCM, Third Party Risk and AI Risk Management.
Prepare concise management reports, dashboards and thematic risk analysis.
Communicate technical risks clearly to senior management and non-technical stakeholders.
Promote consistent Technology Risk practices and a strong risk culture across APD/ID.
Analytics and Automation Responsibilities
Analyze risk, incident, vulnerability, issue and remediation data to identify trends and emerging risks.
Develop management dashboards using Microsoft Power BI.
Use advanced Microsoft Excel, including formulas, Power Query, pivot tables and VBA/macros, to improve analysis and reporting.
Automate recurring reporting and workflow activities using Microsoft tools.
Experience with Power Apps, Power Automate and SharePoint would be an advantage.
Translate business and risk requirements into practical dashboards, workflows and management information.
Job Requirements
Degree in Information Technology, Computer Science, Engineering, Information Systems or a related field.
3 - 5 years' experience in Technology Risk, Cybersecurity, IT Audit, IT Compliance or Technology Governance, preferably in banking.
Good knowledge of regional technology-risk regulations and recognized standards, such as MAS TRM, NIST Cybersecurity Framework, ISO 27001, ITIL and COBIT.
Ability to conduct regulatory and control gap assessments and provide independent 2LoD challenge.
Strong analytical skills and practical experience with Power BI and advanced Excel.
Power Apps, Power Automate, SharePoint, VBA/macros or similar workflow-automation experience is advantageous.
Professional certification such as CISA, CISM, CRISC or CISSP is advantageous.
Strong written communication, management-reporting and stakeholder-engagement skills.
Self-motivated, culturally sensitive and able to manage multiple priorities across regional stakeholders.
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in Singapore.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in Singapore, connecting you to thousands of jobs fast!
Find the best jobs in Singapore, apply in 1 click and get a job today!