Head of Technology Risk

Morgan McKinley; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Morgan McKinley in Singapore is seeking an experienced Head of Technology Risk to lead the risk agenda for a technology-driven firm with a modern cloud environment and high AI adoption.

You will provide independent oversight across Technology, Cybersecurity, Cloud, AI and Third-Party Risk, partnering with CIO/CTO/CISO to enable innovation within a strong risk framework. This leadership role requires shaping risk culture and mentoring a high-performing team.

Qualifications

• 15+ years of experience in Technology, Technology Risk, Cybersecurity, IT Governance or related disciplines.
• Proven track record in technology risk oversight in complex environments (first- and second-line).
• Strong knowledge of Cloud Risk, Cybersecurity, Operational Resilience, Third-Party Risk and AI Risk.
• Experience developing risk frameworks, policies, risk appetite, controls and KRIs.
• Understanding of MAS Technology Risk Management Guidelines where relevant.
• Ability to engage and challenge senior Technology and Cybersecurity stakeholders.
• Excellent communication skills; ability to translate complex technology risks into business insights.
• Relevant qualifications such as CISSP, CISM, CRISC or CISA are advantageous.

Responsibilities

• Lead and enhance the Technology Risk Management framework, policies, standards and risk appetite.
• Provide independent oversight across technology, cloud, cybersecurity, data and emerging technology risks.
• Develop and monitor Technology Risk KRIs, KPIs and risk reporting for senior management and risk committees.
• Provide risk oversight of cloud architecture, transformation, resilience and disaster recovery capabilities.
• Establish and evolve the AI Risk Management framework covering Generative AI, data, model, security, privacy and responsible AI risks.
• Oversee cybersecurity and information security risks, including vulnerability management, identity, data protection and cyber resilience.
• Manage technology risk associated with third-party providers, cloud platforms and outsourced technology services.
• Lead technology risk assessments, control reviews, risk remediation and issue management.
• Monitor emerging technology and regulatory developments and translate them into practical risk requirements.
• Partner with CIO, CTO, CISO, Data and AI leaders to strengthen technology risk ownership and governance.
• Lead and develop a high-performing Technology Risk team.

Skills

Technology Risk

Cybersecurity

Cloud

AI risk

Third-Party Risk

Regulatory knowledge

Education

CISSP

CISM

CRISC

CISA

Tools

MAS Technology Risk Guidelines

Job description

We are seeking an experienced Head of Technology Risk to lead the Technology Risk agenda for a leading technology firm with a modern cloud environment and high adoption of AI and emerging technologies.

The role will provide independent oversight and constructive challenge across Technology, Cybersecurity, Cloud, AI and Third-Party Risk, while partnering closely with technology leadership to enable innovation within a strong risk management framework.

Key Responsibilities

• Lead and enhance the Technology Risk Management framework, policies, standards and risk appetite.
• Provide independent oversight and challenge across technology, cloud, cybersecurity, data and emerging technology risks.
• Develop and monitor Technology Risk KRIs, KPIs and risk reporting for senior management and risk committees.
• Provide risk oversight of the organisation's cloud architecture, transformation, resilience and disaster recovery capabilities.
• Establish and evolve the AI Risk Management framework, covering Generative AI, data, model, security, privacy and responsible AI risks.
• Oversee cybersecurity and information security risks, including vulnerability management, identity, data protection and cyber resilience.
• Manage technology risk associated with third-party providers, cloud platforms and outsourced technology services.
• Lead technology risk assessments, control reviews, risk remediation and issue management.
• Monitor emerging technology and regulatory developments and translate them into practical risk requirements.
• Partner with CIO, CTO, CISO, Data and AI leaders to strengthen technology risk ownership and governance.
• Lead and develop a high-performing Technology Risk team.

Requirement:

• 15+ years of experience in Technology, Technology Risk, Cybersecurity, IT Governance or related disciplines.
• Strong experience in a technology, financial services, fintech or other complex technology environment.
• Proven experience in Technology Risk / independent risk oversight, ideally with both first- and second-line exposure.
• Strong knowledge of Cloud Risk, Cybersecurity, Operational Resilience, Third-Party Risk and AI Risk.
• Experience developing risk frameworks, policies, risk appetite, controls and KRIs.
• Understanding of regulatory and technology risk frameworks, including MAS Technology Risk Management Guidelines where relevant.
• Strong ability to engage and challenge senior Technology and Cybersecurity stakeholders.
• Excellent communication skills, with the ability to translate complex technology risks into clear business-level insights.
• Relevant qualifications such as CISSP, CISM, CRISC or CISA are advantageous.