AVP Technology Assurance & Risk Controls

SGX Group; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

SGX Group is seeking a Line 1.5 Assurance professional to independently validate technology controls, including cybersecurity, data governance and change management, while aligning with MAS TRM and other regulations. You will develop continuous validation use cases, document findings with clear recommendations and report to Technology leadership and risk committees.

Ideal candidates hold CISA/CISM/CISSP/CRISC or equivalent, with 5–7 years in technology risk, audit or governance, and strong

Qualifications

• Bachelor’s degree with 5–7 years in technology risk management/audit/governance.
• Certifications such as CISA, CISM, CISSP, CRISC or equivalent.
• Strong understanding of IT processes (SDLC, change management, cloud, cybersecurity).
• Knowledge of AI governance concepts and regulatory expectations (MAS/CCoP).
• Experience in AI governance, model risk or assurance reviews involving AI/GAN.
• Experience using BI tools and data analytics to enhance testing.

Responsibilities

• Perform independent validation of key Technology controls including cybersecurity, IT operations, data governance, change management, outsourcing and access management.
• Assess adherence to policies, standards, and regulatory requirements (MAS TRM, MAS Cyber Hygiene, Outsourcing, CCoP).
• Document findings and provide actionable recommendations.
• Develop continuous validation use cases for timely gap identification and reduced manual testing.
• Prepare validation reports for Technology management and risk committees.
• Engage with stakeholders across lines to promote risk and control culture.

Skills

Technology Risk Management

Audit

Governance

Data Analytics

Cybersecurity

AI Governance

Regulatory Knowledge

Education

Bachelor's Degree in IT/Finance/Engineering

Tools

Power BI

Tableau

QlikView

SQL

Python

Alteryx

Job description

SGX Group is seeking a Line 1.5 Assurance professional to independently validate technology controls, including cybersecurity, data governance and change management, while aligning with MAS TRM and other regulations. You will develop continuous validation use cases, document findings with clear recommendations and report to Technology leadership and risk committees.

Ideal candidates hold CISA/CISM/CISSP/CRISC or equivalent, with 5–7 years in technology risk, audit or governance, and strong