Lead, Technology Risk Management (AI Risk & Governance)

Maybank Singapore; Singapore; On-site; SGD 180,000 - 300,000; Full time

Job summary

Maybank Singapore seeks a senior AI risk leader responsible for overseeing the Bank's AI risk management framework and governance. You will shape standards, perform independent reviews, and report risk to senior management and the Board.

The role requires deep expertise in AI risk, regulatory expectations, and the ability to articulate risk to non-technical stakeholders while driving practical risk controls within a banking environment.

Qualifications

• 12+ years across technology, engineering, security or research with recent AI exposure.
• Hands-on experience with generative or agentic AI.
• Credentials: ISACA AAIR and ISO/IEC 42001 lead implementer/auditor.
• Certifications: CRISC, CISM, CISA or CISSP.
• Experience forming risk views in regulated environments and defending them at governance forums.
• Line 2 risk, security assurance or audit in banking.
• Involvement in AI governance development and MAS expectations.
• Ability to explain AI risk in plain terms to senior management and the Board.

Responsibilities

• Lead Line 2 oversight of AI risk and own AI risk management framework.
• Maintain AI risk standards, classification criteria, materiality and controls.
• Independently review AI risk assessments, control effectiveness and remediation plans.
• Assess AI risks including model reliability, data leakage and prompt injection.
• Provide independent risk opinions on AI solutions prior to deployment and during changes.
• Monitor AI KRIs and risk trends; escalate material concerns.
• Prepare AI risk reports for senior management, risk committees and Board.
• Ensure MAS guidelines and FEAT principles compliance; support AI submissions.
• Collaborate with Group and regional stakeholders; promote AI risk awareness.

Skills

AI risk management

Regulatory reporting

Executive communication

Risk assessment

Independent review

Education

ISACA AAIR

ISO/IEC 42001 Lead Implementer/Auditor

Job description

To lead the Bank's Line 2 oversight of artificial intelligence risk and own the AI risk management framework. While the Bank's AI governance arrangements evolve, the role brings specialist AI expertise and risk perspective to shape them. As the arrangements mature, the role's focus shifts to independent review, challenge and risk reporting to senior management and the Board.

Key Responsibilities

• Maintain and enhance the Bank's AI Risk Management Framework, policies and oversight methodology.
• Establish AI risk standards, classification criteria, materiality assessments and control requirements.
• Independently review and challenge AI risk assessments, control effectiveness and remediation plans.
• Assess AI-related risks including model reliability, data leakage, prompt injection, agent autonomy, third-party AI services and human oversight.
• Provide independent risk opinions on AI solutions prior to deployment and during significant changes.
• Monitor AI Key Risk Indicators (KRIs), track risk trends and escalator material concerns.
• Prepare AI risk reporting for senior management, risk committees and the Board.
• Ensure compliance with MAS guidelines, FEAT principles and Group AI governance requirements.
• Support regulatory engagements, inspections and AI-related submissions.
• Act as the key Line 2 AI risk advisor and collaborate with Group and regional stakeholders.
• Promote AI risk awareness and capability building within the Risk function.

Requirements

• At least 12 years of professional experience across technology, engineering, security or scientific research, including recent hands-on work with generative or agentic AI.
• AI or security-focused credentials such as ISACA AAIR, ISO/IEC 42001 lead implementer or lead auditor.
• Technology risk certifications such as CRISC, CISM, CISA or CISSP.
• Demonstrable experience assessing how AI systems fail or can be misused, for example through evaluation, red-teaming, guardrail testing, AI security testing or production monitoring."
• Experience forming independent risk or control views in a regulated environment, and defending them at senior management or governance forums.
• Line 2 risk, security assurance or audit experience in banking.
• Involvement in AI governance development, or working knowledge of MAS expectations on AI risk management.
• Ability to assess an AI system on how it actually behaves, not on how it is described.
• Willingness to hold an independent position with builders and senior management, without obstructing delivery.
• Ability to explain technical AI risk in plain terms to senior management and the Board.
• Judgement to take practical positions while standards and technology are still moving.

*Only shortlisted candidates will be notified.