InfoSec & Digital Risk Manager (Third-Party Focus)

OCBC Group; Singapore; Hybrid; SGD 90,000 - 150,000; Full time

Benefits offered by this job

Flexible benefits

Learning & development programs

Community initiatives

Job summary

OCBC Group is seeking an AM/MGR, Information Security & Digital Risk Management Specialist in Singapore. The role focuses on safeguarding digital assets, conducting third-party risk assessments, and ensuring regulatory compliance.

You will work in a hybrid model, collaborating with technology, business, and control functions to strengthen the Group's cyber risk posture and drive risk-informed decisions.

Qualifications

• Degree in Computer Science, Information Security or related field.
• More than 2 years in technology, information, or cyber risk management, preferably in financial services.
• Knowledge of MAS guidelines, NIST SP 800-53, ISO/IEC 27001 advantageous.
• Strong written and verbal communication to convey risk to stakeholders.
• Proactive, resilient and able to work under pressure in a dynamic risk environment.

Responsibilities

• Conduct digital risk assessments, due diligence reviews, and ongoing monitoring of third-party service providers.
• Support development, implementation, and maintenance of third-party policies and frameworks in alignment with regulatory requirements and best practices.
• Collaborate with technology, business, and control functions to ensure end-to-end risk management for third-party service arrangements.
• Support data-driven initiatives leveraging enterprise data platforms to analyse risk data and identify trends.
• Support ongoing risk monitoring and management reporting on the Group’s technology and cyber risk posture relating to third-party services.
• Support Group-wide initiatives to comply with MAS guidelines and outsourcing requirements.

Skills

Information security

Risk management

Regulatory awareness

Stakeholder engagement

Education

Bachelor's degree in Computer Science or Information Security

Certifications CISSP/CISA/CISM advantageous

Job description

OCBC Group is seeking an AM/MGR, Information Security & Digital Risk Management Specialist in Singapore. The role focuses on safeguarding digital assets, conducting third-party risk assessments, and ensuring regulatory compliance.

You will work in a hybrid model, collaborating with technology, business, and control functions to strengthen the Group's cyber risk posture and drive risk-informed decisions.