Information Security & Digital Risk Manager, TPRM

OCBC Bank; Singapore; On-site; SGD 80,000 - 120,000; Full time

Benefits offered by this job

Competitive base salary

Holistic, flexible benefits

Learning and development opportunities

Job summary

OCBC Bank is seeking an Information Security and Digital Risk Management Specialist to safeguard the bank's digital ecosystem. You will review third-party service arrangements, assess controls, and ensure compliance with MAS guidelines and internal policies.

The role emphasizes collaboration across technology, business and control functions. You will stay ahead of evolving cyber risk trends and translate them into practical mitigation strategies.

Qualifications

• Degree in Computer Science, Information Security or related discipline.
• Certifications such as CISSP, CISA, CISM are advantageous.

Responsibilities

• Conduct digital risk assessments and due diligence reviews of third-party service providers.
• Assist in developing and maintaining third-party risk management policies and frameworks.
• Collaborate with technology, business and control functions to ensure end-to-end risk management for third-party arrangements.
• Support automation and process improvements within the Third-Party Risk Management programme.
• Utilise data analytics to identify risk trends and provide actionable insights for decision-making.
• Monitor and report on technology and cyber risk posture related to third-party services to senior management.

Skills

Information security

Risk management

Regulatory knowledge

Communication

Education

Bachelor's degree in Computer Science or Information Security

Job description

OCBC Bank is seeking an Information Security and Digital Risk Management Specialist to safeguard the bank's digital ecosystem. You will review third-party service arrangements, assess controls, and ensure compliance with MAS guidelines and internal policies.

The role emphasizes collaboration across technology, business and control functions. You will stay ahead of evolving cyber risk trends and translate them into practical mitigation strategies.