Data Protection & IT Risk Manager

IBFSG - The Institute of Banking & Finance Singapore; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

The Institute of Banking and Finance (IBF) in Singapore seeks a senior Compliance and IT Security professional to lead Data Protection and Governance as the Data Protection Officer. You will guide PDPA compliance, privacy-by-design, and risk-based decision making across IT, security, and governance functions.

You will coordinate cybersecurity risk management, incident response, audits, and board-ready reporting, engaging stakeholders across divisions to strengthen regulatory alignment and

Qualifications

• Strong knowledge of the PDPA and data governance practices.
• Experience in risk management, audit/compliance, incident management and stakeholder engagement.
• Good understanding of IT and cybersecurity risk concepts, controls and practices.
• Familiarity with standards/frameworks (ISO/IEC 27001, NIST CSF, MAS TRM) is an advantage.
• Hands-on experience in IT security activities (e.g., system audits, vulnerability scanning).
• Knowledge of cybersecurity tooling is an advantage.

Responsibilities

• Lead Data Protection & Governance, serving as a DPO and ensuring PDPA compliance.
• Support IT & Cybersecurity risk and incident response, including risk reporting.
• Act as liaison for external IT audits and strengthen internal controls.
• Support BCM readiness and governance reporting for risk committees.
• Collaborate with business units on risk and security initiatives.

Skills

PDPA & data governance

Risk management

Audit & compliance

Stakeholder engagement

Tools

PAM

IAM

SIEM

Job description

The Institute of Banking and Finance (IBF) in Singapore seeks a senior Compliance and IT Security professional to lead Data Protection and Governance as the Data Protection Officer. You will guide PDPA compliance, privacy-by-design, and risk-based decision making across IT, security, and governance functions.

You will coordinate cybersecurity risk management, incident response, audits, and board-ready reporting, engaging stakeholders across divisions to strengthen regulatory alignment and