AVP, Information Security & Third-Party Risk Management

ocbc; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

OCBC Bank is seeking an Information Security and Digital Risk Management Specialist to safeguard the Group's digital ecosystem and enhance resilience against evolving cyber risks. You will conduct independent reviews of digital risks from third-party services, assess controls, and provide assurance on regulatory compliance applicable to arrangements.

Strong collaboration with technology, business, and control functions is essential.

Qualifications

• A degree in Computer Science, Information Security, or related discipline.
• More than eight years of experience in technology, information, or cyber risk management.
• Certifications such as CISSP, CISA, or CISM are advantageous.
• Strong knowledge of network, cloud security, and third-party assurance artefacts.

Responsibilities

• Conduct digital risk assessments and due diligence on third-party providers.
• Develop, implement and maintain third-party risk policies and frameworks.
• Collaborate with tech, business and control functions to manage risks end-to-end.
• Lead data-driven risk insights and reporting to senior management.

Skills

Cyber risk management

Stakeholder engagement

Technical assessments

Cloud security

AI governance

Education

Degree in Computer Science or Information Security

Tools

AWS

Azure

SOC 2

OSPAR

Job description

OCBC Bank is seeking an Information Security and Digital Risk Management Specialist to safeguard the Group's digital ecosystem and enhance resilience against evolving cyber risks. You will conduct independent reviews of digital risks from third-party services, assess controls, and provide assurance on regulatory compliance applicable to arrangements.

Strong collaboration with technology, business, and control functions is essential.