IT Governance, Risk, Compliance
TypeFull-time job
LocationSingapore
Posted1 hour ago
Key Responsibilities
Serve as the primary liaison between first line of defense and second/third lines for all matters related to IT risk, audit, and regulatory compliance
Collaborate with risk and compliance teams to implement strategic initiatives that strengthen technology risk management and align with regulatory expectations and industry best practices
Identify, assess, and escalate emerging technology risks through the organisations risk management frameworkincluding incident reporting, risk event tracking, and follow-up action plans
Provide expert advisory support to internal stakeholders on IT security and regulatory obligations, ensuring alignment with policies and risk appetite
Coordinate and support internal teams in conducting regulatory and compliance self-assessments, risk awareness programs, and training sessions
Facilitate activities such as risk and control self-assessments (RCSA), KRI monitoring, incident tracking, and service availability reviews
Partner with business and technology teams to streamline and enhance IT risk management processes and governance frameworks
Manage end-to-end IT-related audits and regulatory inspections, including preparation of documentation, responses to information requests, and participation in regulatory engagements
Work with key stakeholders to review audit findings, define remediation plans, and ensure timely closure of issues
Drive communication and awareness of new IT and cyber-related policies and standards across relevant teams
Offer subject matter expertise on IT and cyber risk matters and contribute to enterprise-wide risk and control strategies
Prepare periodic and ad-hoc reports for senior management and regulators
Proactively identify opportunities to innovate, automate, and optimise risk management processes and reporting
Requirements
Minimum of 6 years of experience in IT Governance, Risk Management, or a related field
Exposure to financial services or regulated industries, with working knowledge of MAS regulations, CCOP, or equivalent regulatory frameworks
Background in IT or Cybersecurity operations, governance, compliance, or audit
Strong familiarity with frameworks and standards such as NIST, ISO 27001, MAS TRM guidelines, and relevant legislation (e.g., PS Act)
Professional certifications such as CGEIT, CISA, CISM, CISSP, CRISC, or equivalent are advantageous
Excellent project and time management capabilities, with a proactive problem-solving mindset
Detail-oriented, able to handle multiple deadlines and high-pressure environments
Strong interpersonal skills, with the ability to work both independently and as part of a team
Effective communicator with strong presentation and business writing abilities
Solid understanding of control design and process management, capable of conducting in-depth investigations into risk or control issues
Originally posted on Himalayas
Serve as the primary liaison between first line of defense and second/third lines for all matters related to IT risk, audit, and regulatory compliance
Collaborate with risk and compliance teams to implement strategic initiatives that strengthen technology risk management and align with regulatory expectations and industry best practices
Identify, assess, and escalate emerging technology risks through the organisations risk management frameworkincluding incident reporting, risk event tracking, and follow-up action plans
Provide expert advisory support to internal stakeholders on IT security and regulatory obligations, ensuring alignment with policies and risk appetite
Coordinate and support internal teams in conducting regulatory and compliance self-assessments, risk awareness programs, and training sessions
Facilitate activities such as risk and control self-assessments (RCSA), KRI monitoring, incident tracking, and service availability reviews
Partner with business and technology teams to streamline and enhance IT risk management processes and governance frameworks
Manage end-to-end IT-related audits and regulatory inspections, including preparation of documentation, responses to information requests, and participation in regulatory engagements
Work with key stakeholders to review audit findings, define remediation plans, and ensure timely closure of issues
Drive communication and awareness of new IT and cyber-related policies and standards across relevant teams
Offer subject matter expertise on IT and cyber risk matters and contribute to enterprise-wide risk and control strategies
Prepare periodic and ad-hoc reports for senior management and regulators
Proactively identify opportunities to innovate, automate, and optimise risk management processes and reporting
Requirements
Minimum of 6 years of experience in IT Governance, Risk Management, or a related field
Exposure to financial services or regulated industries, with working knowledge of MAS regulations, CCOP, or equivalent regulatory frameworks
Background in IT or Cybersecurity operations, governance, compliance, or audit
Strong familiarity with frameworks and standards such as NIST, ISO 27001, MAS TRM guidelines, and relevant legislation (e.g., PS Act)
Professional certifications such as CGEIT, CISA, CISM, CISSP, CRISC, or equivalent are advantageous
Excellent project and time management capabilities, with a proactive problem-solving mindset
Detail-oriented, able to handle multiple deadlines and high-pressure environments
Strong interpersonal skills, with the ability to work both independently and as part of a team
Effective communicator with strong presentation and business writing abilities
Solid understanding of control design and process management, capable of conducting in-depth investigations into risk or control issues
Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.