Operational Risk Leader — Second Line of Defense

Confidential Company; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

Confidential Company in Singapore is seeking an experienced professional to lead the implementation and governance of the Operational Risk Management (ORM) framework within the Risk department. You will align ORM with the bank’s digitization strategy and risk appetite, reporting to the Head of Operational Risk Management.

Role covers framework maintenance, regulatory compliance (MAS notices), risk monitoring, RCSA, KRI, and training to grow risk culture across business units.

Qualifications

• Bachelor’s degree or higher from a recognized university.
• 5–8 years in Operational Risk, Internal Audit, or Compliance in retail banking.
• Demonstrate strong analytical capabilities and clear communication with stakeholders.
• Ability to operate in a fast-paced, evolving digital banking environment.

Responsibilities

• Maintain the ORM Framework and ensure policies are embedded across control environments.
• Collaborate with Tech, Risk, Product, and Compliance teams to build robust controls.
• Monitor MAS regulatory landscape to ensure adherence to banking standards.
• Review Ops Risk Events and product programs; oversee RCSA, RA thresholds, and eGRC.
• Deliver accurate risk reporting to risk committee forums and promote risk culture.
• Support training and awareness initiatives and drive ESG-related risk activities.

Skills

Operational Risk

Regulatory Compliance

Stakeholder Collaboration

Data-driven analytics

Risk governance

Risk reporting

Education

Bachelor's degree

Tools

RCSA

KRI

CET

eGRC platform

Job description

Confidential Company in Singapore is seeking an experienced professional to lead the implementation and governance of the Operational Risk Management (ORM) framework within the Risk department. You will align ORM with the bank’s digitization strategy and risk appetite, reporting to the Head of Operational Risk Management.

Role covers framework maintenance, regulatory compliance (MAS notices), risk monitoring, RCSA, KRI, and training to grow risk culture across business units.