Technology Risk & Governance Manager (BankUp To $12k) - Part-Time

The Opportunity

• This is an exciting opportunity to work for one of the leading global banks
• It is an opportunity for a Senior Control Manager, Technology Risk & Governance to join the team

The Job

Technology Risk Management

• Conduct technology risk assessments (e.g., application, infrastructure, third-party, cloud) to identify potential vulnerabilities, threats, and control gaps.
• Evaluate the effectiveness of technology controls and recommend enhancements to mitigate identified risks.
• Maintain and update the bank's technology risk register, tracking key risks, control effectiveness, and mitigation actions
• Monitor technology risk metrics and Key Risk Indicators (KRIs) to provide early warnings of potential issues.
• Participate in technology project lifecycle reviews (SDLC) to ensure security and risk-by-design principles are incorporated from inception.
• Collaborate with internal Technology and business units to develop and implement risk treatment plans

Regulatory Compliance

• Interpret, implement, and monitor compliance with various Singapore regulations and industry standards, including but not limited to requirements for cybersecurity, data governance, business continuity, outsourcing and incident management.
• Participate in regulatory inspections and audits, providing necessary documentation and explanations.
• Track and report on regulatory findings and ensure timely remediation.

Policy & Standards Development

• Assist in the development, review, and update of technology risk management policies, standards, guidelines, and procedures.
• Ensure policies are aligned with regulatory requirements, industry best practices, and the bank's risk appetite.
• Drive awareness and adoption of technology risk and compliance policies across the organization.

Incident Management & Business Continuity

• Support the technology incident management process, focusing on identifying root causes, assessing impact, and ensuring effective remediation from a risk perspective.
• Participate in the review and testing of technology-related business continuity plans and disaster recovery plans.
• Act key reporting contact for regulatory related notifications including incident reporting

Third-Party Risk Management

• Conduct technology risk assessments for third-party vendors and service providers, especially those handling sensitive data or critical services.
• Ensure third-party contracts include appropriate security and compliance clauses.
• Monitor ongoing third-party compliance with agreed-upon security controls.

Reporting

• Prepare regular risk reports, dashboards, and presentations for management, risk committees, and the Board (as required).

The Talent

• 10 years of progressive experience in Technology Risk Management, IT Audit, Information Security, or IT Compliance within the financial services industry
• Demonstrated understanding of banking operations and technology infrastructure.
• Mandatory: Strong knowledge and practical experience with MAS Technology Risk Management (TRM) Guidelines is essential. Familiarity with other relevant regulatory frameworks (e.g., PDPA, AML/CFT) and industry standards (e.g., ISO 27001, NIST Cybersecurity Framework, COBIT, ITIL).
• Advantageous certifications include CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor) and CISSP (Certified Information Systems Security Professional)
• Strong understanding of IT general controls (ITGC), application controls, and infrastructure security.
• Proficiency in risk assessment methodologies and tools.
• Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
• Strong interpersonal skills and ability to build relationships with various stakeholders across different departments.

Next Steps

• Drop your resume and contact us to follow-up, or send your resume to [email protected]
• Email Topic: Apply Senior Control Manager, Technology Risk & Governance
• Only shortlisted candidates will be contacted

Wu Yue Shan

EA License No: 91C2918

Personnel Registration Number: R25138923