IT Risk Manager

Information Risk & GRC We are looking for an experienced Information Risk & GRC professional to support technology risk, cybersecurity risk, regulatory compliance and governance within a regulated financial services environment. The role will work closely with Technology, Cybersecurity, Risk, Compliance, Audit and business stakeholders to ensure technology risks are effectively identified, assessed, monitored and remediated. Key Responsibilities Conduct technology, information security and cybersecurity risk assessments across systems, applications and technology initiatives.

Perform regulatory compliance reviews and gap assessments against MAS Technology Risk Management (TRM) Guidelines and other applicable regulatory requirements.

Support MAS regulatory engagements, inspections, information requests and regulatory reporting .

Coordinate Internal Audit, External Audit and SOX audit activities, including evidence collection, stakeholder coordination and remediation of findings.

Facilitate Risk and Control Self-Assessments (RCSA) and provide effective challenge on identified risks, controls and mitigation plans.

Track technology and cybersecurity risk treatment and remediation plans through to closure.

Support cybersecurity governance, including security incident management, escalation and regulatory reporting obligations .

Review and coordinate FINTEL advisories and threat intelligence assessments , ensuring relevant risks and actions are communicated to stakeholders.

Provide practical information risk, technology risk and compliance advice to business and technology teams.

Prepare risk dashboards, reports and updates for senior management and governance committees .

Support continuous improvement of technology risk management frameworks, policies, controls and governance processes.

Requirements Strong experience in Information Risk, Technology Risk, Cyber Risk, IT Risk or GRC .

Good working knowledge of MAS TRM and Singapore financial services regulatory requirements.

Hands-on experience conducting risk assessments, RCSA, control assessments and regulatory gap assessments .

Experience supporting Internal Audit, External Audit and/or SOX audits .

Experience working with regulators, auditors and senior internal stakeholders.

Good understanding of cybersecurity governance, security controls and security incident management .

Prior experience within banking, insurance, asset management or another regulated financial services environment .

Strong stakeholder management, communication and reporting skills.

Ability to work across Technology, Cybersecurity, Risk, Compliance and business functions. This is an initial 12-months contract role.