Manager - IT Risk

HL Bank; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A financial institution in Singapore is seeking a professional for IT Risk Management responsibilities. The role includes ensuring compliance with regulatory guidelines, tracking cyber security incidents, and conducting independent reviews. Candidates should be prepared to engage with various committees and prepare reports on IT risks and governance. Strong analytical skills and familiarity with IT regulations are essential for this position in a fast-paced environment.

Responsibilities

• Ensure compliance with MAS Notices and Guidelines on Technology Risk Management.
• Ensure compliance with HLBB/HLBS IT governance and policies.
• Track and monitor Cyber and IT Security incidents with proper escalation.
• Review due diligence performed by business owners of service providers.
• Conduct independent reviews of Risk and Control Self-Assessments.
• Validate gap reviews against new IT regulations.
• Prepare reports for Senior Management on cyber risk and system stability.
• Conduct annual SOP reviews and gap assessments.
• Perform other tasks assigned by Management.

Job description

• Ensure compliance to the MAS Notices and Guidelines including but not limited MAS Notice 644 on Technology Risk Management; MAS Guidelines on Technology Risk Management and MAS Notice 655 on Cyber Hygiene;

• Ensure compliance to HLBB/ HLBS IT Governance, Policy and Procedures including the IT, cyber & security standard.

• Ensure proper process established by stakeholders to track and monitor Cyber, IT Security & IT incidents including adequate & timely escalation, proper tracking of remediation actions and closure and validation of closure action items

• Review and ensure adequacy of the due diligence performed by business owner of outsourcing and other non-outsourcing service providers

• Conduct independent review on Risk and Control Self-Assessment (“RCSA”) of IT Department and other departments assigned by the Management.

• Conduct independent validation of gap review performed by stakeholders against the new/revised IT regulations; relevant regulatory self-assessment and ensure that gaps are identified and addressed according to the timeline.

• Preparation of reports to ensure the Senior Management Committee including Head of Department meeting, Risk & Compliance Governance Committee & Regional Risk Management Committee have adequate oversight of the cyber risk, system stability and monitoring of the risk appetite within the HLBB/HLBS.

• Ensure consistency of IT Risk Management policies, methodologies and process within the HLBB/HLBS by conducting annual SOP review, gap review performed by IT department against the published regulations and exposure drafts.

• Other tasks and projects assigned by Management from time to time.