Cybersecurity & Technology Risk Engineer

IoTalents Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

IoTalents Pte. Ltd. seeks an experienced Cybersecurity & Technology Risk Engineer to support technology risk management, third-party security assessments, and vendor due diligence.

You will assess information security and technology risks, review controls and documentation, identify gaps, and provide practical remediation recommendations. Strong analytical and stakeholder-management skills are essential, with MAS guidelines familiarity a plus.

Qualifications

• Minimum 5 years of experience in technology risk, cybersecurity, information security, IT audit, or vendor/third-party risk management.
• Strong understanding of third-party risk management, vendor due diligence, and security assessments.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk.
• Familiarity with MAS TRM Guidelines and MAS Outsourcing Guidelines is preferred.
• Certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Responsibilities

• Conduct third-party, vendor, and outsourcing risk assessments.
• Perform security due diligence and review vendors’ security controls, policies, certifications, and audit reports.
• Assess information security, technology, cloud, compliance, and outsourcing risks.
• Identify control gaps, risks, and remediation needs.
• Prepare risk assessment reports, findings, and recommendations.
• Collaborate with business, technology, cybersecurity, compliance, and vendor stakeholders.
• Support ongoing technology risk and third-party risk management activities.

Skills

Vendor risk management

Third-party risk assessments

Security risk assessments

Report writing

Stakeholder management

Analytical thinking

Technology risk knowledge

Tools

CISSP

CISA

CRISC

CISM

ISO 27001

Job description

We are looking for an experienced Cybersecurity & Technology Risk Engineer to support technology risk management, third-party security assessments, and vendor due diligence activities.

The successful candidate will assess information security and technology risks, review security controls and documentation, identify control gaps, and provide practical recommendations to mitigate risks.

Key Responsibilities

• Conduct third-party, vendor, and outsourcing risk assessments.
• Perform security due diligence and review vendors’ security controls, policies, certifications, and audit reports.
• Assess information security, technology, cloud, compliance, and outsourcing risks.
• Identify control gaps, risks, and areas requiring remediation.
• Prepare clear risk assessment reports, findings, and recommendations.
• Work closely with business, technology, cybersecurity, compliance, and vendor stakeholders.
• Support ongoing technology risk and third-party risk management activities.

Requirements

• Minimum 5 years of experience in Technology Risk, Cybersecurity, Information Security, IT Audit, or Vendor/Third-Party Risk Management.
• Strong understanding of third-party risk management, vendor due diligence, and security assessments.
• Good knowledge of cybersecurity controls, cloud security, and technology/outsourcing risk.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines and MAS Outsourcing Guidelines is preferred.
• Strong analytical, report-writing, documentation, and stakeholder management skills.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Preferred Background

• Experience in banking, financial services, fintech, or other highly regulated industries is highly desirable.
• Experience in conducting vendor security assessments or third-party technology risk reviews will be an advantage.