IT Risk & Governance Manager

SG10 - BJB Bank Julius Baer & Co. Ltd., Singapore Branch; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A prominent financial institution in Singapore seeks an Associate Director for its IT Risk Management team. This role involves close collaboration with operational risk management and compliance functions. Candidates should have 5-10 years of relevant experience, preferably in the banking industry, along with strong communication skills and the ability to manage risks effectively. The position offers an opportunity to make a significant impact in a dynamic environment.

Qualifications

• 5 to 10 years of experience in IT risk management, preferably in banking.
• Strong technical knowledge and understanding of business and IT processes.
• Familiarity with technology regulatory framework in Singapore and Hong Kong.

Responsibilities

• Collaborate with CRO to manage operational risks.
• Support implementation of Cyber risks with Information Security.
• Maintain and review the IT Risk Register and audit points.

Skills

Good communication skills

Ability to work under stress

Independent and self-driven

Team player

Relationship management

Education

ITIL certification preferred

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

IT Risk Management is a regional function in Asia responsible for technology risk governance and management. This function works in close collaboration across IT to foster strong risk culture and awareness. Primary responsibilities include risk management activities with the aim to continuously strengthen IT operational /security posture and provide risk transparency to our management.

YOUR CHALLENGE

IT Risk Management

• Close collaboration with CRO function to align internal control plans, managing/tracking/reporting of operational risks
• Close collaboration with Information Security function to support implementation and/or mitigation of Cyber risks
• Work closely with IT Service Owners to identify, mitigate and treat IT risks
• Work closely with IT Project Managers to identify, mitigate and treat residual risks arising from projects
• Maintain the IT Risk Register. Work closely with Risk champions to identify risks, track and monitor risk action plans, review risk treatment proposals and support closure of remediated risks
• Provide risk awareness training to IT Staff
• SPOC for all internal and external audits. Support fieldwork including review and collection of audit documentation, review audit reports and provide audit responses
• Track audit remediation plans to ensure timely and proper closure of IT audit points
• Cascade technology regulatory changes and work with IT function heads to remediate or mitigate risks/gaps arising from assessments or review
• Responsible for execution and quality review of IT Internal Control Plans
• Oversight on end of life technology, patch management and end user computing guidelines and compliance

People Management

• Individual Contributor
• Coaching

Client Management (internal & external)

• Various IT functions, both regionally and globally
• Operational risk (CRO)
• Local Legal and Compliance functions

Business Management

• Key local stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers
• CRO functions – including Business Operational Risk, Information Security and Compliance functions
• Global functions – IT Risk Management , Information Security
• Establish strong relationship with key stakeholders

Regulatory Responsibilities &/OR Risk Management

• Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

Rank

• Associate Director (AD)

YOUR PROFILE

SKILLS REQUIREMENTS OF THE POSITION

Personal and Social

• Good communication skills covering oral, written, presentation, facilitation
• Ability to work under stressful environment
• Independent and self-driven
• Team player
• Strong relationship management and conflict resolution skills

Professional and Technical

• Between 5 to 10 year of experience in IT risk management and preferably in the banking industry. Wealth Management experience will be an advantage
• Strong technical knowledge
• Good understanding of business and IT processes. ITIL certification preferred
• Strong understanding of the technology regulatory framework in Singapore and Hong Kong

Regulatory (where applicable)

• Familiarity with technology regulatory framework and guidelines

Reporting Line

• Report to Head IT Risk Management Asia

We are looking forward to receiving your full job application through our online application tool.