Executive / Senior Executive, Technology Risk Management

Maybank Singapore; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Maybank Singapore is seeking an experienced Technology Risk Manager to provide independent oversight of technology and cyber risks across the bank. You will assess control effectiveness, challenge stakeholders, and ensure compliance with regulatory standards.

The role involves developing risk policies, monitoring KRIs, and reporting to the Board and committees. Strong analytical, governance, and stakeholder engagement skills are essential.

Qualifications

• Degree in Engineering, Computer Science, or related discipline preferred.
• Certifications CRISC, CISSP, CCSP, CISA beneficial.
• Strong understanding of technology and cyber risk domains.
• Ability to form independent views and challenge stakeholders constructively.
• Structured approach to risk identification, analysis, and escalation.
• Experience in IT, technology risk, governance, or audit roles preferred.
• Intellectual curiosity in emerging risks and evolving threats.
• High learning agility and growth mindset.
• Ability to engage confidently with senior stakeholders over time.
• Strong ownership, accountability, and judgement.

Responsibilities

• Conduct independent assessment of technology risks, controls, and remediation actions.
• Provide credible challenge to Line 1 risk management practices.
• Identify control gaps and systemic weaknesses.
• Support development and enhancement of Technology Risk Management policies, frameworks and standards.
• Ensure alignment with MAS regulatory expectations and Group requirements.
• Review and challenge design and effectiveness of KRIs and risk metrics.
• Ensure metrics are forward-looking and regulator-aligned.
• Drive improvements to strengthen early warning capabilities.
• Prepare and review technology risk reporting to Board and management committees.
• Highlight key risks, emerging threats, and areas requiring attention.
• Monitor emerging technology and cyber risks (e.g. AI-driven threats, digital fraud).
• Contribution to cross-functional risk and governance improvements.
• Support development of a sustainable, governance-led TRM environment.

Skills

Analytical thinking

Stakeholder engagement

Independent judgement

Learning agility

Ownership & accountability

Growth mindset

Education

Engineering/CS degree

Certifications: CRISC, CISSP, CCSP, CISA

Job description

To support the Technology Risk Management function in providing independent oversight of technology and cyber risks across the Bank. The role is responsible for assessing control effectiveness, providing credible challenge to stakeholders, and ensuring compliance with regulatory requirements and internal risk standards.

Responsibilities :

• Conduct independent assessment of technology risks, controls, and remediation actions
• Provide credible challenge to Line 1 risk management practices
• Identify control gaps and systemic weaknesses
• Support development and enhancement of Technology Risk Management policies, frameworks and standards
• Ensure alignment with MAS regulatory expectations and Group requirements
• Review and challenge design and effectiveness of KRIs and risk metrics
• Ensure metrics are forward-looking and regulator-aligned
• Drive improvements to strengthen early warning capabilities
• Prepare and review technology risk reporting to Board and management committees
• Highlight key risks, emerging threats, and areas requiring attention
• Monitor emerging technology and cyber risks (e.g. AI-driven threats, digital fraud)
• Contribution to cross-functional risk and governance improvements
• Support development of a sustainable, governance-led TRM environment

Qualifications :

• Degree in Engineering, Computer Science, or related discipline preferred
• CRISC, CISSP, CCSP, CISA, or equivalent certifications will be added advantages
• Candidate with strong understanding of technology and cyber risk domains
• Strong analytical and critical thinking in assessing risk and control effectiveness
• Ability to form independent views and challenge stakeholders constructively
• Ability to translate technical risks into clear, non-technical implications
• Structured approach to risk identification, analysis, and escalation
• Experience in IT, technology risk, governance, or audit roles preferred
• Intellectual curiosity in emerging risks and evolving threats
• High learning agility and growth mindset
• Ability to engage confidently with senior stakeholders over time
• Strong ownership, accountability, and judgement

*Only shortlisted candidates will be notified.