Tech Risk & Cyber Governance Supervisor

sggovterp; Mas; On-site; IDR 1,674,341,000 - 2,511,511,000; Full time

Job summary

MAS is seeking a senior professional to supervise technology risk management and cyber security programs for banks and financial institutions in Singapore. You will engage Board and senior leadership, supervise IT governance, and direct supervisory actions as needed.

You will conduct both onsite and offsite inspections, assess risk management adequacy, and guide incident response with a focus on governance, SDLC, resilience, and third-party risk.

Qualifications

• Experience in IT/cybersecurity audit or risk assessment.
• Excellent written and spoken English.
• Ability to work across teams and engage senior management.
• Strong project management and stakeholder management.
• Analytical and methodical with enquiring mind.

Responsibilities

• Conduct Boardroom/C-suite conversations with banks’ Board and Senior Management on IT governance and cyber risk.
• Onsite and offsite inspections of banks and financial institutions on control areas (PAM, resilience, SDLC, ITSM, DR, incident management, third-party risk, governance).
• Assess adequacy of Technology Risk Management and provide risk ratings and supervisory directions.
• Oversee and guide management of IT and cyber incidents, including root cause analysis and remediation.
• Assess MAS regulatory breaches and issue supervisory actions/directions.
• Research emerging technology and cyber risk issues and provide recommendations.

Skills

IT audit

English communication

Team player

Project management

Critical thinking

Job description

MAS is seeking a senior professional to supervise technology risk management and cyber security programs for banks and financial institutions in Singapore. You will engage Board and senior leadership, supervise IT governance, and direct supervisory actions as needed.

You will conduct both onsite and offsite inspections, assess risk management adequacy, and guide incident response with a focus on governance, SDLC, resilience, and third-party risk.