Cyber Risk & Compliance Manager

Bank Of China Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bank Of China Limited in Singapore is seeking a cybersecurity and IT risk professional to oversee security operations, threat intelligence, vulnerability management, and regulatory compliance across the branch's IT landscape.

The role focuses on IT outsourcing risk assessments, internal control strengthening, risk quantification, and collaboration with risk management and internal audit to support management decision-making. English and Mandarin communication is required.

Qualifications

• Bachelor’s degree or above in Computer Science, Information Security, Software Engineering, or related majors.
• Candidates holding relevant professional certifications are preferred, such as CISSP, CISM, CISA, ISO27001 Lead Auditor, OSCP, etc.
• Possess excellent written and verbal communication skills in English
• Proficiency in written and spoken Mandarin is required, as the role involves viewing Head Office policies and documents prepared in Chinese, drafting bilingual correspondence where required, and liaising regularly with Head Office.
• Have a strong interest in cybersecurity operations, IT risk governance, IT audit, and regulatory compliance, with a desire for long-term development in the field of IT risk management.
• Preference will be given to candidates with practical experience in cybersecurity (such as SOC operations, penetration testing, incident response) or IT audit backgrounds.
• Familiar with local regulatory requirements and industry best practices
• Familiar with common types of cybersecurity threats and defense technologies, and understand the working principles and configuration logic of mainstream security tools.
• Possess meticulous review capabilities to accurately assess the quality and compliance of IT policies, processes, reports, and audit responses.
• Possess outstanding time management skills and a results-oriented mindset, maintaining high efficiency and ensuring delivery quality in a fast-paced, high-demand environment.
• Demonstrate strong stress resistance and maintain stable performance during emergency security incidents or regulatory inspections.

Responsibilities

• Cybersecurity Operations and Defense: Oversee daily network security operations and lead threat intelligence collection and analysis.
• Oversee daily network security operations for the branch, lead the collection and analysis of cyber threat intelligence, coordinate regular vulnerability scanning, penetration testing, and patch management to ensure the security hardening of infrastructure and application systems.

Skills

Cybersecurity operations

IT risk governance

IT audit

Regulatory compliance

SOC operations

Penetration testing

Incident response

CISSP

CISM

CISA

ISO27001 Lead Auditor

OSCP

Bilingual English-Mandarin

Education

Bachelor’s degree in Computer Science or related

Job description

Bank Of China Limited in Singapore is seeking a cybersecurity and IT risk professional to oversee security operations, threat intelligence, vulnerability management, and regulatory compliance across the branch's IT landscape.

The role focuses on IT outsourcing risk assessments, internal control strengthening, risk quantification, and collaboration with risk management and internal audit to support management decision-making. English and Mandarin communication is required.