AVP, InfoSec & Third-Party Risk

OCBC Group; Singapore; On-site; SGD 180,000 - 300,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits

Community initiatives

Professional development

Job summary

OCBC Group in Singapore is seeking an experienced Information Security and Digital Risk Management Specialist to safeguard the bank's digital ecosystem and ensure third-party providers comply with regulatory requirements. You will lead risk assessments, develop policies, and collaborate across tech, business and control functions to strengthen controls and resilience.

Ideal candidates bring extensive domain knowledge, stakeholder engagement skills, and practical experience in AI governance,

Qualifications

• Eight+ years in technology, information, or cyber risk management.
• Five+ years in third-party risk management, preferably within financial services.
• Certifications such as CISSP, CISA, or CISM are advantageous.
• Knowledge of AI risk, governance, and data security is desirable.
• Familiarity with MAS guidelines and Singapore regulatory frameworks.

Responsibilities

• Conduct digital risk assessments and due diligence on third-party service providers.
• Develop and maintain third-party risk policies, procedures and frameworks.
• Collaborate with technology, business and control functions to ensure end-to-end risk management.
• Lead data-driven initiatives to analyse risk data and provide actionable insights for decision-making.
• Support training and awareness on technology and third-party risk management.

Skills

Information Security

Cyber Risk

Third-Party Risk

Cloud Security

SOC 2

Education

Degree in Computer Science

Tools

AWS

Azure

NIST SP 800-53

Job description

OCBC Group in Singapore is seeking an experienced Information Security and Digital Risk Management Specialist to safeguard the bank's digital ecosystem and ensure third-party providers comply with regulatory requirements. You will lead risk assessments, develop policies, and collaborate across tech, business and control functions to strengthen controls and resilience.

Ideal candidates bring extensive domain knowledge, stakeholder engagement skills, and practical experience in AI governance,