AVP, Technology Assurance

SGX Group; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

SGX Group is seeking a Line 1.5 Assurance professional to independently validate technology controls, including cybersecurity, data governance and change management, while aligning with MAS TRM and other regulations. You will develop continuous validation use cases, document findings with clear recommendations and report to Technology leadership and risk committees.

Ideal candidates hold CISA/CISM/CISSP/CRISC or equivalent, with 5–7 years in technology risk, audit or governance, and strong

Qualifications

• Bachelor’s degree with 5–7 years in technology risk management/audit/governance.
• Certifications such as CISA, CISM, CISSP, CRISC or equivalent.
• Strong understanding of IT processes (SDLC, change management, cloud, cybersecurity).
• Knowledge of AI governance concepts and regulatory expectations (MAS/CCoP).
• Experience in AI governance, model risk or assurance reviews involving AI/GAN.
• Experience using BI tools and data analytics to enhance testing.

Responsibilities

• Perform independent validation of key Technology controls including cybersecurity, IT operations, data governance, change management, outsourcing and access management.
• Assess adherence to policies, standards, and regulatory requirements (MAS TRM, MAS Cyber Hygiene, Outsourcing, CCoP).
• Document findings and provide actionable recommendations.
• Develop continuous validation use cases for timely gap identification and reduced manual testing.
• Prepare validation reports for Technology management and risk committees.
• Engage with stakeholders across lines to promote risk and control culture.

Skills

Technology Risk Management

Audit

Governance

Data Analytics

Cybersecurity

AI Governance

Regulatory Knowledge

Education

Bachelor's Degree in IT/Finance/Engineering

Tools

Power BI

Tableau

QlikView

SQL

Python

Alteryx

Job description

At SGX Group, we create markets. We turn ideas into products and expand access to new opportunities. We are building the future of the exchange in-house: from architecture and platforms to the critical systems that power markets. The biggest decisions are still open to people who join us now.

Job description

BUILD MARKETS. SHAPE ECONOMIES.

At SGX Group, we create markets. We turn ideas into products and expand access to new opportunities. We are building the future of the exchange in-house: from architecture and platforms to the critical systems that power markets. The biggest decisions are still open to people who join us now.

The opportunity

Reporting to the Validation Lead, the Line 1.5 assurance role provides independent, control-focused assurance within Technology. The role evaluates the design and operating effectiveness of controls across technology and processes. It partners closely with First Line control owners, leveraging data-driven and continuous assurance to identify control gaps earlier and strengthen regulatory control alignment.

What you will do

Control Assurance and Testing

• Perform independent validation of key Technology controls, assessing design and operating effectiveness of controls related to areas such as cybersecurity, IT operations, data governance, change management, outsourcing, and access management.
• Assess adherence to internal policies, standards, and regulatory requirements (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
• Document validation findings and providing clear, actional recommendations.
• Develop and implement continuous validation use cases to provide more timely control gap identification and reduce reliance on manual testing.

Regulatory Compliance

• Support the interpretation and implementation of regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).

Risk Governance, Reporting, and Stakeholder Engagement

• Prepare validation reports for Technology management and risk committees with clear risk articulation, prioritised recommendations, and target implementation dates.
• Engage constructively with stakeholders across Line 1, 2, and 3, promoting a strong risk and control culture.

What we are looking for

Essentials

• Bachelor’s Degree with 5 to 7 years of relevant experience within financial institutes in the areas of Technology Risk Management/ Audit/ Governance, and Data Analytics.
• Relevant professional certifications such as CISA, CISM, CISSP, CRISC or equivalent.
• Strong understanding of IT processes such as SDLC, change management, cloud, infrastructure operations, and cybersecurity.
• Understanding of AI and Generative AI concepts, associated risks, and governance considerations, including model risk, data privacy, security, explainability, bias, accountability, and human oversight.
• Experience participating in AI governance, technology risk, model risk management, or assurance reviews involving AI or Generative AI solutions.
• Familiarity with Singapore regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).

What may set you apart

• Good communication and writing skills, especially in summarising risks and controls clearly for senior stakeholders.
• Ability to independently conduct reviews, perform control design assessment, process walkthroughs, evidence, and identify root causes.
• Ability to provide constructive challenges while maintaining a strong relationship with stakeholders and control owners.
• Independent, detail-oriented, and capable of managing multiple priorities.
• Familiarity with industry AI governance frameworks and regulatory guidance, such as MAS FEAT Principles, NIST AI Risk Management Framework (AI RMF), or equivalent frameworks will be an advantage.
• Experience in applying data analytics and automation using BI Tools (such as Power BI, Tableau, QlikView), and Programming/ Scripting Languages (such as SQL, Python, Alteryx) to enhance control testing will be an advantage.

About SGX Group

SGX Group is one of the world's most trusted international marketplaces, known for its stability and openness. Anchored in Singapore, we enable price discovery, capital formation and risk management across asset classes, supported by resilient infrastructure and robust clearing. We convene issuers, investors and intermediaries to create and grow markets that stand the test of time. Find out more atwww.SGXGroup.com.