Cybersecurity and Technology Risk Engineer

AVENSYS CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Avensys Consulting Pte. Ltd. in Singapore seeks an experienced Technology Risk & Third-Party Security Assessment Specialist to support vendor due diligence, assess information security and compliance risks, and provide actionable remediation recommendations.

The role involves reviewing controls, preparing risk assessment reports, and collaborating with business, technology, security, compliance, and vendor stakeholders to strengthen outsourcing arrangements in a regulated environment.

Qualifications

• 5+ years of experience in Technology Risk, Cybersecurity, IT Audit, Information Security, or Vendor Risk Management.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk management.
• Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines preferred.
• Certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.
• Experience in banking/financial services or regulated environments desirable.

Responsibilities

• Perform third-party and outsourcing risk assessments.
• Review vendor security controls, policies, certifications, and audit reports.
• Assess information security, technology, compliance, and cloud-related risks.
• Identify control gaps and recommend remediation actions.
• Prepare risk assessment reports and document findings.
• Collaborate with business, technology, security, compliance, and vendor stakeholders.

Skills

Third-party risk management

Vendor due diligence

Risk assessment

Stakeholder management

Job description

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Cybersecurity and Technology Risk Engineer.

This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job Description

Job Description – Technology Risk & Third-Party Security Assessment Specialist

We are seeking an experienced Technology Risk & Third-Party Security Assessment Specialist to support the security review and assessment of third-party service providers and outsourcing arrangements. The successful candidate will conduct vendor due diligence reviews, assess information security, technology, and compliance risks, evaluate control evidence and documentation, identify risk gaps, and provide clear recommendations for risk mitigation.

Key Responsibilities

• Perform third-party and outsourcing risk assessments.
• Review vendor security controls, policies, certifications, and audit reports.
• Assess information security, technology, compliance, and cloud-related risks.
• Identify control gaps and recommend remediation actions.
• Prepare risk assessment reports and document findings.
• Collaborate with business, technology, security, compliance, and vendor stakeholders.

Requirements

• 5+ years of experience in Technology Risk, Cybersecurity, IT Audit, Information Security, or Vendor Risk Management.
• Strong understanding of third-party risk management and vendor due diligence processes.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk management.
• Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines is preferred.
• Excellent analytical, report-writing, and stakeholder management skills.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.
• Preferred Background Experience within banking, financial services, fintech, or other highly regulated environments is highly desirable.

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.