Risk and Control Specialist - DSG SG

CIMB Singapore; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

CIMB Singapore is seeking an experienced Technology Risk Manager to provide expertise on technology risk and regulatory compliance for digital banking platforms, APIs, and cloud technologies.

You will oversee risk assessments, ensure regulatory alignment, and drive remediation. The role requires strong analytical skills, stakeholder collaboration and experience in Agile/DevOps environments.

Qualifications

• Degree or professional qualification in Banking, Finance, Computer Science, or Business.
• Certifications: CISA, CRISC, and CISSP preferred.
• 8+ years in technology risk, compliance, or related banking roles.

Responsibilities

• Provide expertise on technology risk and regulatory compliance for digital banking platforms, APIs, and cloud technologies.
• Oversee risk assessments, including outsourcing risk, and guide mitigation strategies.
• Assess compliance exposure to security, digital automation, AI, data analytics, and regulatory requirements; drive remediation.
• Monitor and report risk indicators; escalate operational risk events and collaborate on mitigation.
• Perform regulatory gap analyses and manage regulatory expectations.
• Collaborate to ensure policies align with the Bank's risk framework.

Skills

Cybersecurity

Risk management

Regulatory compliance

Communication skills

Analytical thinking

Agile/DevOps

Stakeholder collaboration

Cloud technologies

Education

Degree or professional qualification in Banking/Finance/CS/Business

CISA

CRISC

CISSP

Tools

NIST

ISO 27001/2

Cyber Security Act

Job description

Responsibilities

JOB DESCRIPTION

Technology Risk Management

• Technology Risk Management: Provide expertise on technology risk and regulatory compliance, focusing on digital banking platforms, APIs, and cloud technologies
• Risk Assessment and Mitigation: Oversee risk assessments, including outsourcing risk and common high-risk areas, and provide guidance on mitigation strategies
• Compliance and Governance: Assess compliance exposure to security, digital automation, AI, data analytics, and technology-related regulatory requirements, and drive remediation efforts
• Risk Management: Monitor and report risk indicators, **escalate** operational risk events, and collaborate on risk mitigation strategies
• Regulatory Compliance: Perform regulatory gap analysis, ensure adequate risk and control measures, and manage regulatory expectations
• Policy and Procedure Alignment: Collaborate with stakeholders to ensure departmental policies and procedures are effective, updated, and aligned with the Bank ’ s risk framework

Champion the Risk and Compliance Culture

• Support Head of RCU/HOD to champion Risk and Compliance culture, and provide relevant risk and compliance updates / training within the department
• Work in collaboration with 2nd LOD in developing relevant risk and compliance updates / training materials / risk culture initiatives for the department
• Ensure continuous upskilling of own capabilities on risk and compliance knowledge to enable effective risk identification, assessment and control across the functions of the department

Regulatory Compliance

• Support Head RCU/HOD/CIB in addressing requirements and audit requests of local regulators with respect to non-financial risks and regulatory compliance, ensuring departmental non-financial risk controls and practices are following the applicable banking laws, regulations, internal policies and procedures
• Stay abreast of industry trends, regulatory developments and best practices in non-financial risk and compliance risk to continuously enhance departmental risk management capabilities and operational resilience

Requirements

Qualifications

• Degree holder, or Professional Qualification in the relevant discipline such as Banking, Finance, Computer Science, or Business

Professional Qualification and/or Regulatory, Licensing Requirements

• Professional information security certifications such as CISA, CRISC, and/or CISSP
• Sound knowledge in regulatory requirements (e.g. MAS Notice FSM-05, FSM-06, and TRM guidelines) and industry standards/ frameworks such as NIST, ISO 27001/2, Cyber Security Act, and MAS Outsourcing/Risk Management Guidelines.
• Professional or post graduate qualifications e.g. AML/CFT and TFS Certification, Regulatory Compliance Certification and the equivalent issued by an acknowledged institution and/or regulatory bodies, will be added as advantage

Relevant Work Experience

• Minimum 8 years of work experience, preferably with 1st line or 2nd line working experience in banking industry, digital transformation projects, and/or from commercial law enforcement team
• Possess strong prior experience and knowledge in technology, digital control frameworks, cyber standards and policy review, oversight and governance, risk management, and IT audit.
• Strong analytical and problem-solving skills with the ability to deliver pragmatic solutions to risk issues independently

Competencies/Skills

• Good communication skills both verbal and written
• An understanding of risk drivers and ability to articulate risk to non-risk personnel
• Understanding of how a bank operates front to back
• A deep understanding of cybersecurity, technology, cloud environments, and fraud risk management requirements of a universal bank
• Strong understanding of digital banking architectures, system requirements, APIs, data platforms, and infrastructure
• Experience in being able to contribute to methodology enhancement and assurance methodologies
• Experience working in or supporting Agile / DevOps / digital transformation environments
• Develop strong partnership and collaboration with the various business units, Risk, Compliance, Technology, and RCU teams with the achievement of the common goals in mind