InfoSec & Digital Risk Manager (Third-Party Focus)

OCBC (Singapore); Singapore; On-site; SGD 90,000 - 140,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits and wellbeing

Learning and development opportunities

Community initiatives

Job summary

OCBC Singapore is seeking an Information Security and Digital Risk Management Specialist to safeguard the Group's digital ecosystem and enhance its resilience against evolving cyber risks. You will conduct independent reviews of digital risks from third-party services, assess control design and effectiveness, and provide assurance on regulatory compliance.

You will work with technology, business, and control functions to identify material risks, challenge existing controls, and ensure policies

Qualifications

• A degree in Computer Science, Information Security, or a related discipline.
• More than 2 years of relevant experience in technology, information, or cyber risk management, preferably within financial services.
• Knowledge of MAS Technology Risk Management Guidelines and MAS Outsourcing Guidelines; familiarity with NIST SP 800-53/ISO/IEC 27001 advantageous.
• Strong written and verbal communication, with ability to articulate risk clearly to stakeholders.

Responsibilities

• Conduct digital risk assessments, due diligence reviews, and ongoing monitoring of third-party service providers.
• Develop, implement, and maintain third-party policies, procedures and frameworks aligned with regulatory requirements and industry best practices.
• Collaborate with technology, business, and control functions to ensure end-to-end risk management for third-party service arrangements.
• Support continuous improvement initiatives for the Third-Party Risk Management programme, including process optimization, automation, and operating model enhancements.
• Leverage data platforms to analyze risk data, identify trends and provide actionable insights for risk-informed decisions.
• Support ongoing risk monitoring and reporting on the Group’s technology and cyber risk posture to senior management and committees.
• Support Group-wide initiatives to ensure compliance with MAS guidelines and outsourcing requirements.
• Provide training and awareness on technology risk and third-party risk management across the Group.

Skills

Information security

Cyber risk

Stakeholder engagement

Regulatory awareness

Education

Bachelor's degree in Computer Science or related field

Job description

OCBC Singapore is seeking an Information Security and Digital Risk Management Specialist to safeguard the Group's digital ecosystem and enhance its resilience against evolving cyber risks. You will conduct independent reviews of digital risks from third-party services, assess control design and effectiveness, and provide assurance on regulatory compliance.

You will work with technology, business, and control functions to identify material risks, challenge existing controls, and ensure policies