IT Risk Officer

1-year renewable contract

Salary: Up to 8K SGD / month

Service Offering

• Manage IT regulatory remediation project and validate IT remediation actions

• Support the rollout of IT risk management strategy, framework and standard(s) in Asia

• Support day to day IT Risk management activities in Asia including:

Ø Maintenance of the central risk register

Ø Tracking of risk mitigation plans and

Ø Follow up on risk remediation and/or mitigation plans

• Assist in preparation of risk reporting to IT Risk Management Forum as well as Operational Risk Committees in Singapore and Hong Kong.

• Perform regulatory (MAS and HKMA) and security related assessments, review technical control effectiveness, identify gaps and follow up on actions

• Perform and execute internal control plans

• Review application security concept design as part of project implementations

• Work with external and internal audit to facilitate fieldwork and tracking of IT related audit items

• Handle routine security related tasks e.g. password management, review of requests

• Drive a positive risk culture through training, communication and collaboration

• Prepare materials for periodic IT Risk Awareness trainings

KEY FEATURES OF THE POSITION

IT Risk Management

• Maintain the central risk register for Asia

• Support and assist risk owners to develop risk mitigation/remediation strategies for High, Medium and Low risk items

• Maintain oversight of risks mitigation / remediation plans of High, Medium and Low risk items

• Work closely with IT Project Managers to identify, mitigate and treat residual risks arising from projects

• Collaborate with Information Security function to support implementation and/or mitigation of Cyber risks

• Prepare risk reporting materials to be presented at IT Risk Management Forum and Operational Risk Committees

• Perform internal control validations and highlight exceptions for remediation

• Track, monitor and report on status of controls

• Provide IT risk awareness trainings

• Support IT teams in responding to external and internal audit queries. Review audit reports and provide audit responses

• Track audit remediation plans to ensure timely and proper closure of IT audit points

KEY FEATURES AND ACCOUNTABILITIES

Client Management (internal & external)

• Various IT functions, both regionally and globally

• Operational risk (CRO)

• Local Legal and Compliance functions

Business Management

• Key local stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers

• CRO functions – including Business Operational Risk, Information Security and Compliance functions

• Global functions – IT Risk Management, Information Security

• Establish strong relationship with key stakeholders

Regulatory Responsibilities &/OR Risk Management

• Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

SKILLS REQUIREMENTS

• 6 to 7 years of experience, in the areas of Information Technology, Risk Governance or Control, Security or Audit related functions

• Banking experience, preferably in Wealth Management. Sound understanding of various business functions

• Strong technical skills. Experience in IT delivery or implementation and having a good understanding system design is a plus

• Independent worker, team player

• Preferred certification: CISSP, CISA

• Familiar with local regulatory environment in Singapore and Hong Kong

• Experience in interaction with regulator preferred

Kshama

Registration No. / Unique Entity Number: 199801439D

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)