InfoSec & Third-Party Risk Manager

OCBC; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

OCBC in Singapore seeks an Information Security and Digital Risk Management Specialist to safeguard the bank’s digital ecosystem and strengthen resilience against cyber risks. You will review third-party arrangements, assess design and operating controls, and provide assurance on regulatory compliance and best practices.

You will stay ahead of technology and risk trends, translate them into mitigation strategies, and work with technology, business, and control functions to maintain effective

Qualifications

• More than 2 years in technology, information, or cyber risk management, ideally in financial services.
• Knowledge of MAS guidelines and other regional standards (NIST SP 800-53, ISO/IEC 27001).
• Strong written and verbal communication, with ability to articulate risk clearly.
• Ability to influence outcomes across teams and geographies.
• Proactive, resilient, and able to perform under pressure in a dynamic risk environment.

Responsibilities

• Conduct digital risk assessments and due diligence reviews for third parties.
• Support development and maintenance of third-party risk policies and frameworks.
• Collaborate with technology, business, and control functions to manage risks end-to-end.
• Assist in continuous improvement of the Third-Party Risk Management programme.
• Leverage data platforms to analyze risk data, identify trends, and provide insights.
• Support risk monitoring and reporting to senior management and committees.
• Help ensure compliance with MAS and outsourcing guidelines.
• Provide training and awareness on technology and third-party risk management.

Skills

Risk assessment

Stakeholder engagement

Regulatory awareness

Proactive mindset

Influence and communication

Education

Bachelor's degree in Computer Science or Information Security

CISSP/CISA/CISM certifications advantageous

Job description

OCBC in Singapore seeks an Information Security and Digital Risk Management Specialist to safeguard the bank’s digital ecosystem and strengthen resilience against cyber risks. You will review third-party arrangements, assess design and operating controls, and provide assurance on regulatory compliance and best practices.

You will stay ahead of technology and risk trends, translate them into mitigation strategies, and work with technology, business, and control functions to maintain effective