IT Risk Specialist

NETWORK FOR ELECTRONIC TRANSFERS (SINGAPORE) PTE LTD; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

NETWORK FOR ELECTRONIC TRANSFERS (SINGAPORE) PTE LTD is seeking a Second Line of Defence IT Risk professional to identify, assess, monitor and report key IT risks across the organisation.

You will document controls, support ITDR/BC resiliency, and liaise with stakeholders to promote risk awareness, reporting, and improvements in a regulated financial environment in Singapore.

Qualifications

• Minimum 4+ years of IT risk experience in a regulated financial industry.
• Experience in ITDR/Business Continuity and resiliency.
• Knowledge of Singapore regulatory requirements (MAS/cyber hygiene).
• Strong written and verbal English communication.

Responsibilities

• Identify, assess, monitor and report IT risks in collaboration with first line.
• Document controls and identify improvements in IT risk posture.
• Conduct RCSA, incident risk management and risk reporting.
• Support risk committee meetings and staff risk-awareness activities.
• Maintain strong stakeholder relationships to promote risk resiliency.

Skills

IT risk management

Regulatory knowledge

Stakeholder management

Communication

Analytical thinking

Problem solving

Education

Bachelor’s degree in IT/Cybersecurity/Finance

Tools

ITIL

CISSP

CRISC

Job description

Position Summary

This role, as a second line-of-defence, is required to work with first line-of-defence functions to identify, assess, monitor and report key IT risks.

This role is also required to work closely with divisions/functions to understand and document controls and identify potential areas of improvement. Experience in IT and Cybersecurity Risk management is necessary, with good communication and written skills.

Key Responsibilities

• Support in the implementation and operation of the IT risk management framework, policies, processes, and procedures
• Assist in the identification, prioritisation, assessment, monitoring and reporting of key IT risks
• Conduct risk and controls self-assessment (RCSA), operational loss event reporting, assess risk control adequacy and effectiveness
• Monitor and report risk tolerances and key risk indicators
• Support incident risk management and escalation, IT risk-related projects and/or initiatives
• Assist in the conduct of risk committee meetings, risk awareness training and workshop for staff
• Maintain a trusted and collaborative relationship with stakeholders, to promote risk awareness and resiliency

Requirements

• Minimum 4+ years of experience in IT Risk including ITDR/Business Continuity and Resiliency; experience in a regulated financial industry
• Experience in IT operations, Internal/IT Audit and relevant risk certifications ("e.g. ITIL, CISSP, CRISC") is an added advantage
• Knowledge of current regulatory requirements in Singapore and industry best practices ("e.g. MAS TRM Guidelines, MAS Cyber Hygiene, Cyber Security Code of Practice for Critical Information Infrastructure, FSM-N13, FSM-14")
• Good working knowledge of risk management and control concepts, constantly paying attention to details and ability to perform deep-dive investigation
• Good stakeholder management and collaboration skills
• Strong and effective written and verbal communication skills in English is a must
• Highly motivated and has a strong desire to learn and succeed
• Excellent problem-solving skills, ability to prioritize, multi-task and handle tight deadlines
• Proactive team player with ability to work independently with minimal supervision