VP/ED Process Management (Risk & Compliance)

OCBC; Singapore; On-site; SGD 100,000 - 140,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Professional development opportunities

Job summary

OCBC in Singapore is looking for a candidate to lead technology risk management and compliance initiatives. This role requires a strong background in technology risk, with responsibilities including overseeing audits and coordinating risk management for the Group Operations & Technology.

The ideal candidate will possess at least 15 years of experience in related fields and have relevant risk certifications. The position offers competitive pay and a suite of flexible benefits.

Qualifications

• Minimum 15 years of experience in audit, IT security, or risk management.
• Hands-on experience in technology domains.
• Good understanding of regulatory requirements.

Responsibilities

• Lead collaboration efforts with technology teams to address risks.
• Manage technology-related audits across the bank.
• Develop and implement risk management strategies.

Skills

Leadership

Risk Management

Audit Coordination

Regulatory Compliance

Technology Controls

Education

University degree in technology

IT risk certification (CISSP, CISA, CRISC)

Tools

Middleware technologies

Virtualization

Databases

Job description

Group Operations and Technology (O&T)

Provides IT and backroom support across the bank’s business lines such as Group Consumer Financial Services, Group Corporate Banking, Global Treasury, Group Risk Management, Group Finance, and Group Human Resources. In addition, the group runs the bank’s regional processing centres and technology operations, drives for productivity gains and lower unit costs by instilling a quality culture, and leverages synergy from cross‑border processing hubs in Singapore, Malaysia and across the region.

Responsibilities

The objective of Group O&T Risk & Prevention (R&P) is to establish a risk awareness and compliance culture that helps Group O&T to manage risks. In supporting O&T departments, Group Risk and Regulatory Compliance Unit as the Division Compliance Officer, Business Continuity Management Coordinator and Ops Risk management Coordinator, R&P undertakes the following responsibilities:

• Coordinate and facilitate the implementation of Operational Risk & Compliance policies, methodologies, and initiatives for proactive risk management by Group O&T.
• Monitor and uplift the Division’s risk and compliance management performance through tracking of audit issues, compliance breaches and loss events.
• Provide independent review of risk assessments performed by O&T for new/changed processes to ensure integration of risk management into internal processes.
• Manage the audit engagement process, track, and ensure timely closure of issues.
• Promote awareness of risk among O&T staff and educate them on methodologies and processes for risk management and compliance.

Role Description

The candidate is expected to take a leadership role in ensuring that technology-related risks are proactively identified, assessed, and effectively mitigated. This includes leading collaboration efforts with technology teams and regional Risk & Prevention (R&P) functions across the OCBC Group to address technology risk challenges and to drive a strong risk culture within Group Operations & Technology (O&T).

The candidate will lead a small team responsible for end-to-end management of all technology-related audits across the bank. The role ensures strong audit-preparedness and high-quality coordination. The candidate is expected to provide expert advisory on technology controls, MAS and regulators’ expectations, and bank’s risk framework.

Duties & Responsibilities

• Support the Head, Technology Risk and Head, R&P in the overall effective and proactive management of technology risk and controls in Group O&T.
• Act as a liaison party for technology audits (internal, external and reviews) to support stakeholders as well as tracking, reporting and root causes are addressed.
• Work closely with stakeholders to perform infrastructure (operating systems, middleware, databases, network), applications, operations risk, and control assessments to ensure systems’ configurations, processes, and operations.
• Identify, assess, treat, mitigate and articulate the risk in both technical and business context to stakeholders.
• Assess compliance with the bank’s standards and policies, as well as statutory and regulatory requirements.
• Represent Technology team in risk-related committees and forums.
• Collaborate with O&T teams across entities locally and in the region to assess risk profiles, identify potential areas of lapses, or non-compliance and develop risk mitigation strategies for sustained controls.
• Design and implement automated audit risk monitoring and reporting that provides alerts and dashboards to help management and stakeholders make informed decisions.
• Develop and deliver training and awareness programmes to educate stakeholders on emerging trends in risk.
• Provide advice, objective review and challenge to risk issues/process changes identified by stakeholders to ensure technology-related operational risk identified is assessed adequately and appropriate controls are in place to mitigate the risks.
• Continuously uplift our risk standards as the custodian of the ITMP.

Preferred Requirements

Open to change as the team continually adopts to strategy to meet evolving regulatory and controls landscape. Good understanding of regulatory requirements, such as MAS Technology Risk Management, Outsourcing and Notice 644, 655, etc. Understanding of regional regulatory requirements is a plus. Experience with performing IT risk and control assessments (including RCSA) and managing audits (internal and external) as well as regulatory inspections. Good understanding and experience (preferred) of DevOps, SRE, Agile methodologies and experience with CI/CD approach and tools. Hands-on experience in the following infrastructure technology, would be desirable:

• Servers Platform
• Middleware technologies
• Microservices
• Virtualization
• Network
• Security
• Database

Experience in developing and implementing dashboards/ data visualization, heatmap presentation of metrics. (desirable)

Academic

Minimally, a university degree in technology (or technology-related discipline) with at least 15 years of experience in audit/ IT security/ risk management. Practitioner and holder of IT risk certification, such as CISSP, CISA, or CRISC or other IT/IT security related certifications would be advantageous.

Core Competencies

Successful candidates should have a strong background in technology risk management, as well as hands‑on experience in technology domains or audit/compliance. They are driven, self‑motivated individuals that demonstrate initiative and results oriented. Forward‑thinking and interested in keeping up to date with developments and best practices in risk management, analytics and automation, the candidate should be hands‑on, have good analytical skills, attention to details and have excellent communication and collaboration skills, as well as strong ability to lead, manage stakeholders (internal and external), adopt and work effectively in a dynamic, fast‑paced, demanding environment.

What We Offer

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry‑leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.