Information Technology Risk Manager

BANK OF CHINA LIMITED; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading banking institution in Singapore is seeking an experienced IT Risk Manager. You will identify and mitigate IT risks, lead the implementation of regulatory compliance, and ensure cybersecurity measures are effective. The ideal candidate will have a Bachelor's degree in Computer Science, at least 5 years of relevant experience, and hold professional certifications like CISSP or CISA. Strong communication skills in English and Chinese will be essential for this role.

Qualifications

• Minimum 5 years of experience in system/network administration or IT risk management.
• Strong sense of ownership and risk awareness.
• Relevant professional qualifications like CISSP, CISA.

Responsibilities

• Identify, assess, and mitigate IT risks and vulnerabilities.
• Lead the implementation of regulatory compliance requirements.
• Conduct cybersecurity protection and compliance with data security regulations.

Skills

IT risk management

System/network administration

Cybersecurity

Effective communication

Attention to detail

Education

Bachelor’s degree in Computer Science or Information Technology

Tools

IT risk monitoring tools

Security platform tools

Job description

Job Description

1. Identify, assess, and mitigate IT risks and vulnerabilities. Conduct first-line defense inspections and follow up on issue rectification.
2. Take the lead in response of TRMG gap analysis and other regulatory requirements, verify the implementation of regulatory compliance requirements, and ensure compliance of the branch's IT risk work. Collaborate with internal control and audit teams on risk and compliance activities.
3. Lead and organize IT outsourcing management activities, including vendor due diligence and annual reviews.
4. Conduct cybersecurity protection and ensure compliance with data security regulations. Develop and implement security policies and data protection measures. Deploy and maintain security platform tools to support information system security.
5. Support the implementation and use of IT risk monitoring tools and quantification systems.
6. Develop and deliver IT risk and security training at the branch level.

Job Requirements

1. Bachelor’s degree or above in Computer Science, Information Technology, or a related discipline.
2. Minimum 5 years of experience in system/network administration or IT risk management, preferably within a banking, financial services, or large-scale enterprise environment.
3. Strong sense of ownership, risk awareness.
4. Able to communication effectively both written and spoken in English & Chinese with internal/external stakeholders and Head Office.
5. Attention to details, with the ability to thoroughly and accurately review IT policies, process, reporting and audit responses.
6. Relevant professional qualifications and certificates like CISSP, CISA, etc.
7. Knowledge of regulatory requirements and industry practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, ISO27001 etc.)