Banking: Head of Technology Risk Management

The Resolute Hunter Pte Ltd; Singapore; Sur place; SGD 180 000 - 280 000; Plein temps

Résumé du poste

The Resolute Hunter Pte Ltd is recruiting for a Head of Technology Risk Management at a major Singapore bank. You will lead the TRM team, oversee technology and cyber risk governance, and drive the technology risk framework across the organization.

Ideal candidates have extensive IT risk, cybersecurity, and regulatory engagement experience in financial institutions, with strong leadership and stakeholder management capabilities.

Qualifications

• Bachelor-level IT or information security degree required.
• Strong understanding of technology risk management and information security governance.

Responsabilités

• Lead and develop the threat and risk team with resource planning and performance management.
• Provide independent oversight of technology, cyber, information security, operational resilience and outsourcing risks.
• Lead the development and enhancement of the Technology Risk Management framework.

Connaissances

Leadership

Stakeholder management

Regulatory awareness

Cloud security

Third-party risk

Incident oversight

Formation

Bachelor's degree in IT/IS/CS/Cybersecurity

Description du poste

THE COMPANY

This bank has is reputable and has an established brand name. Currently, they seek a Head of Technology Risk Management to be part of their team.

JOB RESPONSIBILITIES

• Lead and develop the TRM team, including resource planning and performance management
• Provide independent oversight of technology, cyber, information security, operational resilience, and outsourcing-related risks
• Lead the development and enhancement of the Technology Risk Management framework
• Establish governance processes to identify, assess, monitor, report and manage technology and cybersecurity risks
• Provide strategic direction for technology risk and information security governance
• Ensure compliance with applicable regulatory requirements and internal standards, including leading regulatory gap assessments and remediation tracking
• Oversee technology risk assessments, risk registers, and management reporting
• Oversee the effectiveness of key technology and cybersecurity controls, including security monitoring, incident response, vulnerability management, privileged access management, and change management, ensuring material control weaknesses are identified, escalated, and remediated in a timely manner
• Review cybersecurity incidents and remediation actions
• Provide independent risk oversight and challenge for significant technology initiatives, projects, system implementations, cloud adoption, and digital transformation programs
• Lead the coordination and administration of the Technology Risk Management Committee (TRMC), including agenda planning, preparation of risk reporting, escalation of material issues, and tracking of management actions
• Establish and oversee the cybersecurity awareness strategy and program
• Drive continuous improvement in technology risk governance and risk culture

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science/Cybersecurity or any other relevant IT education
• Professional certifications such as CISA, CRISC, CISSP, CISM etc. preferred
• Minimum 12 years- 15 years of experience handling IT Risk/Cybersecurity/Technology risk management/Information security/IT governance, or related fields, in a bank or Financial Institutions
• Good understanding of cloud technologies, outsourcing arrangements, third-party technology risk management, and associated security, governance, and risk considerations
• Strong knowledge of technology risk management, cybersecurity, information security governance, operational resilience, cloud security, cyber threat landscape, and regulatory requirements applicable to financial institutions
• Proven experience in risk assessments, security reviews, control effectiveness assessments, incident oversight, remediation management, and regulatory engagement
• Strong analytical, strategic thinking, and problem-solving abilities, with the capacity to provide independent judgement and effective challenge on technology and cybersecurity risk matters
• Excellent stakeholder management, communication, and leadership skills, engage and influence both technical and non-technical stakeholders