IT Risk Manager - Contract

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading technology firm in Singapore is seeking an experienced IT cyber security professional to manage risk assessments and vendor evaluations. The ideal candidate must have a degree in Computer Science or related fields and 3 to 7 years of experience in IT cyber security risk management. Responsibilities include conducting awareness trainings, publishing security articles, and supporting risk management operations. Strong communication skills and relevant certifications are preferred.

Qualifications

• 3 to 7 years of experience in IT cyber security risk management.
• Experience in performing IT risk assessments and vendor risk assessments.
• Preferably with IT security certifications like CISSP or CISM.

Responsibilities

• Support Application Risk and Control function for IT Cyber Risk Management operations.
• Conduct regular awareness trainings for staff on cyber and technology risks.
• Publish security awareness articles and simulate phishing campaigns.

Skills

IT cyber security risk management

Vendor risk assessments

Strong analytical skills

Excellent communication skills

Education

Degree in Computer Science/Information Technology

Tools

NIST

COBIT

ITIL

Job description

Skillset (Must have):

• Possess a degree in Computer Science/Information Technology or related fields.
• 3 to 7 years of experience in IT cyber security risk management, implementation and governance.
• Proficient with professional industry knowledge and experience in Information, Technology Risk, Cyber Security risk management, and frameworks (e.g. NIST, COBIT, ITIL etc.).
• Experience in performing IT risk assessments, vendor risk assessments, audit and operational risk issues management, and recommending appropriate remediations for in-house developed applications, commercial off the shelf products and Cloud services/platforms.
• Experience in conducting regular awareness trainings for staff on cyber, information and technology risks (including policies, standards and relevant topics), periodically publishing security awareness articles and email phishing simulation campaigns etc.
• Strong influential, problem solving, analytical and interpersonal skills.
• Excellent written and communication skills.
• Support Application Risk and Control function for Information and Technology Cyber Risk Management operations
• Preferably with IT security certification (e.g. CISSP, CISM, CCSK, CGEIT).