Principal IT Risk & Control Lead (IWM)

Nomura; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Nomura is seeking a Principal IT Risk & Control Officer (IWM) to oversee IT audit readiness for the International Wealth Management division in Asia. The role coordinates between technology teams and internal/external stakeholders on IT risk, controls, and regulatory matters.

Responsibilities include managing SOX, MAS, SFC, and JFSA audits, documenting control decisions, and delivering regular senior management reports on risk and remediation progress.

Qualifications

• Degree in Computer Science, Engineering, Information Systems, or related discipline.
• Minimum 6 years’ experience in IT risk, IT security, IT audit, or IT controls within financial services.
• Minimum 4 years’ experience in IT audits and reviewing controls, frameworks, policies, and standards.
• Strong understanding of MAS TRM, HKMA/SFC, JFSA regulatory requirements.
• Excellent communication and advisory skills for non-technical stakeholders.

Responsibilities

• Oversee IT audit readiness and review internal IT controls, frameworks, policies, and standards.
• Engage with external reviewers including financial auditors, SOX assessors, and regulators (MAS, SFC, JFSA).
• Interpret regulatory requirements and translate them into operational actions and sustainable controls.
• Act as single point of contact for IT-related audit and regulatory engagements; coordinate with auditors and IT teams.

Skills

IT risk

IT audit

IT controls

Regulatory knowledge

Communication

Attention to detail

Education

Degree in CS/Engineering

Tools

SOX ITGC testing

Regulatory reporting tools

Job description

Nomura is seeking a Principal IT Risk & Control Officer (IWM) to oversee IT audit readiness for the International Wealth Management division in Asia. The role coordinates between technology teams and internal/external stakeholders on IT risk, controls, and regulatory matters.

Responsibilities include managing SOX, MAS, SFC, and JFSA audits, documenting control decisions, and delivering regular senior management reports on risk and remediation progress.