IT Governance, Risk, Compliance

AMSERS Consulting; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

AMSERS Consulting is seeking an experienced IT Risk & Compliance professional in Singapore to lead governance across IT risk, audit, and regulatory compliance. You will interface with risk and regulatory teams to implement strategic initiatives and elevate technology risk management practices.

You will assess emerging risks, provide advisory support on IT security and regulatory obligations, and drive self-assessments, training, and remediation efforts with stakeholders.

Qualifications

• Minimum of 6 years of experience in IT Governance, Risk Management, or a related field.
• Exposure to financial services or regulated industries with knowledge of MAS regulations, CCOP, or equivalent frameworks.
• Background in IT or Cybersecurity operations, governance, compliance, or audit.
• Familiar with standards such as NIST, ISO 27001, MAS TRM guidelines, and PS Act.
• Certifications like CGEIT, CISA, CISM, CISSP, CRISC are advantageous.

Responsibilities

• Serve as liaison between risk and regulatory teams for IT risk, audit, and compliance.
• Collaborate to implement initiatives strengthening technology risk management and regulatory alignment.
• Identify and elevate emerging technology risks within the risk management framework.
• Provide advisory support on IT security and regulatory obligations to internal stakeholders.
• Coordinate regulatory/self-assessments, risk awareness programs, and training.
• Facilitate RCSA, KRI monitoring, incident tracking, and service availability reviews.
• Partner with business & tech to enhance risk management processes and governance.
• Manage IT-related audits and regulatory inspections, including documentation and responses.
• Review audit findings, define remediation plans, and ensure closure.
• Communicate new IT and cyber policies across teams.
• Offer SME input on IT/cyber risk for enterprise risk strategies.
• Prepare reports for senior management and regulators.
• Identify opportunities to innovate and automate risk reporting.

Skills

IT governance

Risk management

Regulatory compliance

MAS regulations

NIST framework

ISO 27001

CGEIT

CISA

CISM

CISSP

CRISC

Auditing

Job description

Key Responsibilities

• Serve as the primary liaison between first line of defense and second/third lines for all matters related to IT risk, audit, and regulatory compliance
• Collaborate with risk and compliance teams to implement strategic initiatives that strengthen technology risk management and align with regulatory expectations and industry best practices
• Identify, assess, and elevate emerging technology risks through the organisations risk management frameworkincluding incident reporting, risk event tracking, and follow-up action plans
• Provide expert advisory support to internal stakeholders on IT security and regulatory obligations, ensuring alignment with policies and risk appetite
• Coordinate and support internal teams in conducting regulatory and compliance self-assessments, risk awareness programs, and training sessions
• Facilitate activities such as risk and control self-assessments (RCSA), KRI monitoring, incident tracking, and service availability reviews
• Partner with business and technology teams to streamline and enhance IT risk management processes and governance frameworks
• Manage end-to-end IT-related audits and regulatory inspections, including preparation of documentation, responses to information requests, and participation in regulatory engagements
• Work with key stakeholders to review audit findings, define remediation plans, and ensure timely closure of issues
• Drive communication and awareness of new IT and cyber-related policies and standards across relevant teams
• Offer subject matter expertise on IT and cyber risk matters and contribute to enterprise-wide risk and control strategies
• Prepare periodic and ad-hoc reports for senior management and regulators
• Proactively identify opportunities to innovate, automate, and optimise risk management processes and reporting

Requirements

• Minimum of 6 years of experience in IT Governance, Risk Management, or a related field
• Exposure to financial services or regulated industries, with working knowledge of MAS regulations, CCOP, or equivalent regulatory frameworks
• Background in IT or Cybersecurity operations, governance, compliance, or audit
• Strong familiarity with frameworks and standards such as NIST, ISO 27001, MAS TRM guidelines, and relevant legislation (e.g., PS Act)
• Professional certifications such as CGEIT, CISA, CISM, CISSP, CRISC , or equivalent are advantageous
• Excellent project and time management capabilities, with a proactive problem-solving mindset
• Detail-oriented, able to handle multiple deadlines and high-pressure environments
• Strong interpersonal skills, with the ability to work both independently and as part of a team
• Effective communicator with strong presentation and business writing abilities
• Solid understanding of control design and process management, capable of conducting in-depth investigations into risk or control issues

Originally posted on Himalayas