Position Summary

This role, as a second line-of-defence, is required to work with first line-of-defence functions to identify, assess, monitor and report key IT risks.

This role is also required to work closely with divisions/functions to understand and document controls and identify potential areas of improvement. Experience in IT and Cybersecurity Risk management is necessary, with good communication and written skills.

Key Responsibilities

• Support in the implementation and operation of the IT risk management framework, policies, processes, and procedures
• Assist in the identification, prioritisation, assessment, monitoring and reporting of key IT risks
• Conduct risk and controls self-assessment (RCSA), operational loss event reporting, assess risk control adequacy and effectiveness
• Monitor and report risk tolerances and key risk indicators
• Support incident risk management and escalation, IT risk-related projects and/or initiatives
• Assist in the conduct of risk committee meetings, risk awareness training and workshop for staff
• Maintain a trusted and collaborative relationship with stakeholders, to promote risk awareness and resiliency

Requirements

• Minimum 4+ years of experience in IT Risk including ITDR/Business Continuity and Resiliency; experience in a regulated financial industry
• Experience in IT operations, Internal/IT Audit and relevant risk certifications (e.g. ITIL, CISSP, CRISC) is an added advantage
• Knowledge of current regulatory requirements in Singapore and industry best practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, Cyber Security Code of Practice for Critical Information Infrastructure, FSM-N13, FSM-14)
• Good working knowledge of risk management and control concepts, constantly paying attention to details and ability to perform deep-dive investigation
• Good stakeholder management and collaboration skills
• Strong and effective written and verbal communication skills in English is a must
• Highly motivated and has a strong desire to learn and succeed
• Excellent problem-solving skills, ability to prioritize, multi-task and handle tight deadlines
• Proactive team player with ability to work independently with minimal supervision