IT Governance, Risk & Control Specialist (GRC / Technology / Banking)

Smart IMS Inc.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Smart IMS Inc. in Singapore is seeking an IT Governance, Risk & Control (GRC) Specialist to support a leading global investment bank. This role covers end‑to‑end risk governance across technology and regulatory engagements.

You will lead audits, manage RFIs, strengthen control frameworks, and collaborate with regional stakeholders to ensure compliance with laws, rules, and standards across APAC technology verticals.

Qualifications

• 5+ years of experience in technology internal controls, technology risk, audit, compliance, or regulatory engagement.
• Strong understanding of technology control frameworks, risk management concepts, and governance practices.
• Proven experience in managing audits, regulatory exams, or risk programs in large, complex environments.
• Strong project management and organizational skills with the ability to manage multiple priorities and stakeholders effectively.
• Excellent written and verbal communication skills, with the ability to clearly articulate complex concepts to senior stakeholders.
• Highly detail‑oriented and analytical, with strong critical‑thinking and problem‑solving capabilities.
• Ability to operate independently in a fast‑paced, global environment with competing priorities.

Responsibilities

• Lead and coordinate internal/external audits, regulatory engagements, and compliance targeted assessments, serving as the central point of contact
• Manage Requests for Information (RFIs), ensuring accuracy, consistency, and adherence to risk standards
• Maintain an updated inventory of audits, exams, and RFIs for supported technology areas
• Analyze thematic exam RFIs to anticipate future exam focus areas, build standard response library and strengthen preparation activities
• Provide guidance and procedural awareness to stakeholders to ensure high‑quality deliverables
• Manage risk matters in accordance with the established risk framework
• Facilitate risk identification, risk instruments / issues intake, execution and reporting
• Ensure that risk matters, issues, and remediation plans follow established frameworks and documented expectations
• Analyze control gaps, exam findings, and risk themes to strengthen governance across technology
• Participate in remediation activities that intersect with audit or exam deliverables for supported portfolios
• Support Horizontal Risk governance activities, including assessments of new or updated Laws, Rules, Regulations, Policies and Standards applicable to technology
• Collaborate with governance leads to evaluate operational and regulatory impacts across APAC technology verticals
• Provide oversight into control consistency, alignment to global standards, and adherence to established risk practices
• Build strong relationships across Technology, Audit, GCOR, and global/regional stakeholders
• Facilitate discussions during audits/exams, resolve challenges, and provide updates to stakeholders and leadership
• Interface with business partners to understand processes, risks, and controls relevant to exam and governance activities

Skills

Regulatory engagement

Audits & regulatory exams

Stakeholder management

Risk governance

Technology controls

Communication skills

Project management

Analytical thinking

Education

Professional certifications (CISA, CISM, CRISC, CGEIT, CISSP)

Tools

Python

Advanced Excel

Job description

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire an IT Governance, Risk & Control (GRC) Specialist in Singapore to support our client which is a leading global investment bank. This role involves providing end‑to‑end risk governance and oversight across Technology. Key responsibilities include but are not limited to the following, to ensure consistent execution aligned to the Bank’s risk framework:

• Regulatory Engagements, Audit & Assessment Management
• Issues Governance & Technology Risk and Regulatory Support
• Stakeholder & Relationship Management

Responsibilities:

Regulatory Engagements, Audit & Assessment Management:

• Lead and coordinate internal/external audits, regulatory engagements, and compliance targeted assessments, serving as the central point of contact
• Manage Requests for Information (RFIs), ensuring accuracy, consistency, and adherence to risk standards
• Maintain an updated inventory of audits, exams, and RFIs for supported technology areas
• Analyze thematic exam RFIs to anticipate future exam focus areas, build standard response library and strengthen preparation activities
• Provide guidance and procedural awareness to stakeholders to ensure high‑quality deliverables

Issues Governance & Technology Risk and Regulatory Support:

• Manage risk matters in accordance with the established risk framework
• Facilitate risk identification, risk instruments / issues intake, execution and reporting
• Ensure that risk matters, issues, and remediation plans follow established frameworks and documented expectations
• Analyze control gaps, exam findings, and risk themes to strengthen governance across technology
• Participate in remediation activities that intersect with audit or exam deliverables for supported portfolios
• Support Horizontal Risk governance activities, including assessments of new or updated Laws, Rules, Regulations, Policies and Standards applicable to technology
• Collaborate with governance leads to evaluate operational and regulatory impacts across APAC technology verticals
• Provide oversight into control consistency, alignment to global standards, and adherence to established risk practices

Stakeholder & Relationship Management:

• Build strong relationships across Technology, Audit, GCOR, and global/regional stakeholders
• Facilitate discussions during audits/exams, resolve challenges, and provide updates to stakeholders and leadership
• Interface with business partners to understand processes, risks, and controls relevant to exam and governance activities

Requirements:

• 5+ years of experience in technology internal controls, technology risk, audit, compliance, or regulatory engagement within complex organizations
• Strong understanding of technology control frameworks, risk management concepts, and governance practices
• Proven experience in managing audits, regulatory exams, or risk programs in large, complex environments
• Strong project management and organizational skills with the ability to manage multiple priorities and stakeholders effectively
• Excellent written and verbal communication skills, with the ability to clearly articulate complex concepts to senior stakeholders
• Highly detail‑oriented and analytical, with strong critical‑thinking and problem‑solving capabilities
• Ability to operate independently in a fast‑paced, global environment with competing priorities
• Strong communication skills, communicate complex ideas in a clear and concise manner. Ability to deconstruct complex issues and drive timely decisions

Preferred Skills:

• Experience in Banking & Markets Technology, Infrastructure Technology, Information Security or Technology Controls consulting
• Familiarity with APAC regulatory environments for technology and cybersecurity
• Professional certifications such as CISA, CISM, CRISC, CGEIT, CISSP
• Advanced Excel, automation, or Python experience helpful