The Information Technology (IT) Risk and Cyber Security Governance Senior Officer role supports technology risk management, cyber security governance, regulatory compliance, and vendor risk activities within an established financial institution. Based in Singapore with a hybrid working arrangement, the position offers broad exposure to banking technology governance, Monetary Authority of Singapore (MAS) regulatory requirements, audit management, and cyber security controls within a structured and highly regulated environment.

Responsibilities

Technology Risk & Governance

Support the execution and enhancement of the organisation's IT Risk Management framework
Maintain risk registers, governance documentation, policies, procedures, and management reporting
Perform gap assessments against regulatory requirements and track remediation actions
Ensure technology controls are properly documented and audit-ready

Cyber Security & Compliance

Monitor and review IT security controls, including access management, vulnerability management, and segregation of duties
Support cyber security assessments, risk reviews, and awareness initiatives
Coordinate cyber exercises and governance activities with regional and global stakeholders

Vendor Risk Management

Conduct vendor due diligence and outsourcing risk reviews
Monitor vendor performance, Service Level Agreement (SLA) compliance, and contract obligations
Review third-party risk assessments and recommend improvements where necessary

Audit & Regulatory Support

Support internal and external audits, compliance reviews, and regulatory inspections
Prepare evidence, reports, and documentation for audit and regulatory requirements
Liaise with auditors, regulators, and internal stakeholders on technology risk matters

Requirements

Diploma or degree in information technology, cyber security, or a related discipline
Minimum 3 years of experience in one or more of the following areas:

IT risk
IT audit
Cyber security governance
Technology risk management

Experience working within banking, financial services, or other regulated industries
Familiarity with one or more of the following:

MAS Technology Risk Management (TRM)
ISO 27001
NIST CSF
SWIFT CSP
SOC 2

Strong documentation, reporting, and stakeholder management skills
Good understanding of IT infrastructure, access controls, and security controls
Preferred qualifications:

Experience supporting audits, regulatory inspections, or compliance reviews
Exposure to vendor governance and outsourcing risk management
Japanese language capability is advantageous but not mandatory

Relevant professional backgrounds include:

IT Risk Analyst
Technology Risk Officer
IT Governance Specialist
Cyber Security Governance Analyst
IT Auditor
IT Controls Analyst
Information Security Governance Officer
Technology Risk & Compliance Analyst
Cyber Risk Analyst
Technology Governance Officer

Additional information

Why Join

Exposure to banking technology risk and regulatory governance
Strong focus on MAS compliance and cyber security governance
Opportunities to work with regional and global stakeholders
Stable, structured, and highly regulated environment
Broad exposure across technology risk, vendor governance, audit, and compliance functions

About the company

A company operating in the financial services industry with an established presence in Singapore. The organisation operates within a structured and highly regulated environment, supporting a broad range of activities across its business.

JAC Recruitment Pte. Ltd.

EA Licence: 90C3026

EA Personnel Name: Jaspreet Kaur Sran

EA Personnel: R22109724

Information Technology Risk and Cyber Security Governance Senior Officer