Cybersecurity and Technology Risk Engineer

UNIZEN TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

UNIZEN TECHNOLOGIES PTE. LTD.

in Singapore is seeking an experienced Technology Risk & Third-Party Security Assessment Specialist to support security reviews of third-party service providers and outsourcing arrangements, ensuring risk controls are effective and compliant. You will conduct vendor due diligence, assess information security, technology and compliance risks, identify gaps, and deliver actionable recommendations for risk mitigation while coordinating with security, compliance and

Qualifications

• 5+ years of experience in Technology Risk, Cybersecurity, IT Audit, Information Security, or Vendor Risk Management.
• Solid understanding of third-party risk management and due diligence processes.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk management.
• Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines is preferred.
• Certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Responsibilities

• Perform third-party and outsourcing risk assessments.
• Review vendor security controls, policies, certifications, and audit reports.
• Assess information security, technology, compliance, and cloud-related risks.
• Identify control gaps and recommend remediation actions.
• Prepare risk assessment reports and document findings.
• Collaborate with business, technology, security, compliance, and vendor stakeholders.

Skills

Technology Risk

Cybersecurity

IT Audit

Information Security

Vendor Risk Management

Third-party risk management

Due diligence

Analytical skills

Report writing

Stakeholder management

Job description

Job Description - Technology Risk & Third-Party Security Assessment Specialist

We are seeking an experienced Technology Risk & Third-Party Security Assessment Specialist tosupport the security review and assessment of third-party service providers and outsourcing arrangements. The successful candidate will conduct vendor due diligence reviews, assess information security, technology, and compliance risks, evaluate control evidence and documentation, identify risk gaps, and provide clear recommendations for risk mitigation.

Key Responsibilities

• Perform third-party and outsourcing risk assessments.
• Review vendor security controls, policies, certifications, and audit reports.
• Assess information security, technology, compliance, and cloud-related risks.
• Identify control gaps and recommend remediation actions.
• Prepare risk assessment reports and document findings.
• Collaborate with business, technology, security, compliance, and vendor stakeholders.

Requirements

• 5+ years of experience in Technology Risk, Cybersecurity, IT Audit, Information Security, or Vendor Risk Management.
• Strong understanding of third-party risk management and vendor due diligence processes.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk management.
• Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines is preferred.
• Excellent analytical, report-writing, and stakeholder management skills.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Preferred Background

Experience within banking, financial services, fintech, or other highly regulated environments is highly desirable.