Manager, Risk & Compliance

Singapore Pools; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Health & wellness benefits

Continuous learning and upskilling

Volunteerism and community initiatives

Job summary

Singapore Pools in Singapore is seeking a seasoned professional to implement and maintain Enterprise Risk Management and Business Continuity Management programmes, ensuring ISO/WLA-SCS/SS714 certifications stay current. The role includes audits, policy reviews, and crisis governance to uphold strong corporate governance.

The successful candidate will lead certification activities, develop BCM documentation, and provide Secretariat support during crises while coordinating with senior management

Qualifications

• Degree-qualified in Accountancy, Engineering, or related fields with 8–10 years of work experience in at least two areas.
• Experience in Enterprise Risk Management and/or Business Continuity Management or Certification work.
• Strong communication and organizational skills; risk/compliance experience preferred.

Responsibilities

• Coordinate and maintain certification audits for ISO9001, ISO27001, WLA-SCS, and SS714.
• Conduct gap analyses for new/revised standards and close identified gaps with business units.
• Review policies and procedures to ensure compliance with ISO / WLA-SCS / SS714.
• Perform internal audits and staff training/awareness on certifications.
• Provide BCM framework guidance and maintain related documents and processes.
• Support crisis management as Secretariat and facilitate BCM exercises and reporting.

Skills

Enterprise Risk Management

Business Continuity Management

Certification work

Education

Bachelor's degree in Accountancy, Engineering, or related fields

Job description

Select how often (in days) to receive an alert:

Date: 23 Oct 2026

Work that powers communities.

Who We Are

Singapore Pools (SPPL) was established by the Singapore government on 23 May 1968 to provide safe and trusted betting to counter illegal gambling. As a not-for-profit organisation, it makes contributions to the Tote Board to fund a wide range of causes in social service, community development, sports, arts, education and health sectors.

Since 2004, over $5 billion have been channelled to the Tote Board. In addition, Singapore Pools also contributes about $2 billion annually to the Government in the form of taxes and duties. Its responsible gaming practices have been awarded the highest level of certification (Level 4) by the World Lottery Association’s Responsible Gaming Framework since 2012.

Since inception, Singapore Pools’ staff have a long-standing commitment to doing good and giving back to those in need. Staff volunteers support activities held all year round, from helping disadvantaged children, youth-at-risk, underprivileged families, and elderly, to conserving the environment.

Job Purpose

This role will implement and maintain Enterprise Risk Management and Business Continuity Management programmes, ISO/WLA-SCS/SS714 certifications so that the Company remain as an effective legal gambling operator with strong corporate governance, is resilient with effective responses in event of crisis, and has effective processes to achieve ISO/WLA-SCS/SS714 compliance.

What You'll Do

• ISO9001/ISO27001/WLA-SCS/SS714 certifications:
  • Coordinate overall certification audit programme to maintain the certifications for the organisation.
  • Conduct gap analysis for new/revised certification standards and work with business units to close any identified gaps.
  • Review of policies and procedures to ensure they addressed the clauses in the ISO / WLA-SCS /SS714 standards.
  • Conduct internal audits, training/awareness for staff.
  • Work with external certification body for external audits and maintenance of certifications.
• Business Continuity Management:
  • Establish, maintain and continually improve the implementation of the BCM framework and BCP related documents.
  • To provide Secretariat support for Senior Management during a crisis.
  • To serve as Secretariat to a weekly Operations Committee meeting, where incidents and operational matters are discussed.
  • Provide guidance to business units to develop and maintain department Business Continuity Plans and to conduct regular Business Impact Analysis (BIA).
  • Establish and maintain processes and practices to ensure that the enterprise-wide business continuity programme remains current and aligns with industry standards and best practices as appropriate.
  • Develop and facilitate exercises/tests and post-test reporting.
  • Manage and facilitate training/awareness initiatives and kept abreast of the BCM practices in the organisation.
• Responsible for regular reporting (3 times a year) to the Audit and Risk Committee (ARC) of the Board of Directors.
• Constantly monitors risk profile to ensure that new or emerging risks are captured and mitigated.
• Coordinate and conduct enterprise-wide communications, training programmes, and surveys.

Who You Are

• Degree-qualified in Accountancy, Engineering, or related fields, with 8 to 10 years of work experience in at least two of the following areas:
  • Enterprise Risk Management
  • Business Continuity Management
  • Certification work (especially International Standard (ISO9001, ISO27001), World Lottery Association Security Control Standard (WLA-SCS), and SS714 (Data Protection Trustmark).
• Prior Risk and Compliance experience, either with a Big Four consulting firm, or in an in-house capacity, would be preferred.
• A strong communicator with excellent interpersonal and organizational skills.
• Preferred Qualifications:
  • ISO9001, ISO27001 auditor/lead auditor and Practitioner Certificate in Personal Data Protection (or other equivalent such certifications).
  • Business Continuity Management certification, e.g. CBCI (Certificate of the Business Continuity Institute); CBCP (Certified Business Continuity Professional) by DRI International; ISO 22301 Lead Implementer / Lead Auditor certification.
  • Enterprise Risk Management certification e.g. IRM International Certificate in Enterprise Risk Management; RIMS-CRMP (Certified Risk Management Professional);
  • Technology Risk Management, e.g. CISM (Certified Information Security Manager) by ISACA; CISA (Certified Information Systems Auditor) by ISACA; CRISC (Certified in Risk and Information Systems Control) by ISACA.

What We Offer

• Health & wellness benefits
• Continuous learning and upskilling opportunities
• Volunteerism and community initiatives

Only shortlisted candidates will be contacted for further career conversations.