Risk Services - Technology, Cyber and Third Party Risk Management - Manager/ Senior Manager

PwC Singapore; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

PwC Singapore is seeking a Manager for their Technology, Cyber and Third Party Risk team. This role involves managing and delivering cyber security risk assignments and collaborating with clients to enhance their risk profiles. Candidates should have at least 3 years of experience and relevant certifications, along with excellent communication and project management skills.

The ideal candidate will demonstrate leadership and an analytical mindset, contributing to business development and improvement of client relationships within the financial sector.

Qualifications

• At least 3 years of experience in a relevant role.
• CISA, CISM, CISSP, PMP or equivalent certification preferred.
• Experience in business development or sales is a plus.

Responsibilities

• Deliver technology and cyber security risk assignments.
• Collaborate with clients to improve controls.
• Provide trusted advice on risk management.

Skills

Technology, Cyber and Third Party Risk

Project Management

Excellent Communication Skills

Leadership

Analytical Thinking

Education

Degree in Business, Engineering, IT or related disciplines

Tools

ServiceNow

JIRA

CyberArk

OneTrust

Job description

Join our diverse, global community at PwC, where we solve important problems together. You'll develop your unique skills in exciting ways, powered by technology.

Line of Service

Assurance

Industry/Sector

FS X-Sector

Specialism

Cybersecurity & Privacy

Management Level

Manager

About Us

Our Risk Services Practice provides critical insights and independent assurance to help clients protect and strengthen their businesses. We manage and mitigate risks from cybersecurity breaches to supply chain disruptions, covering technology, resilience, operations, data analytics, regulatory requirements, data security and privacy, internal audit, and third parties. We build trust in clients' digital agendas through robust technology, cyber and third party risk management in all industry sectors with a focus on financial services, including banks, insurers, asset managers, payment services, and fintechs. Our practice is growing due to client demands for help with rapid development, regulatory complexities, and evolving digital risks. Supporting clients' confidence in their digital future is key to their growth, making our Technology, Cyber and Third Party Risk (TCTR) team a priority for our firm.

How will you value add?

We are seeking a number of experienced Senior Managers to join our TCTR team to respond to strong demand‑led growth. The team helps clients to understand their technology, cyber, third‑party risks and regulatory obligations, define and execute a strategy which enables the business to deliver its objectives within their desired risk appetite whilst meeting regulatory obligations. We assist clients in understanding and challenging their current risk profiles; we develop and operationalise their risk management strategies; we advise and support their risk mitigation to stay competitive through building trust and resilience in their digital agenda. We cover a wide range of disciplines, including technology risk management, cyber security and risk management, third‑party risk management, cloud security and governance, and application controls, working with our specialists within specific domains.

Responsibilities

Client Service

• Managing and delivering technology, cyber security, and third‑party risk assignments, such as improving control environments, risk management approach, producing documentation and reports, and quality assuring the work produced by junior team members.
• Collaborate with stakeholders such as clients to identify opportunities to improve their key controls across cybersecurity, business, technology and third‑party management processes.
• Providing our clients with trusted advice, rooted in a pragmatic understanding of their business strategy, to help them navigate complex, risk‑driven risk decisions.
• Work on specific projects to substantially improve and evolve the capability and quality of the processes, deliverables and thought leadership.

Business and practice development

• Building client relationships and establishing credibility by demonstrating knowledge of various aspects of risk management, and identifying opportunities where PwC can assist.
• Provide advisory related services through all major milestones of the sales and delivery life cycles including identification, proposal development, planning, fieldwork, reporting and debrief processes.
• Supporting the development of toolkits, methodologies, and accelerators including innovating to enable automation and the use of generative AI.
• Provide coaching and/or conduct training to junior staff to develop communication, analytical and technical skills.

About You

• A good Degree in Business, Engineering, Computer Science, Information Technology (IT) or related disciplines with IT focus.
• At least 3 years Technology, Cyber and or Third Party Risk and Control experience in Big 4 or leading organisations.
• CISA, CISM, CISSP, PMP or other professional certification is preferred.
• Demonstrated track record in leading engagements within a professional services or consulting environment, self‑driven, combined with ability to work in teams effectively.
• Excellent communication skills – both oral (for interviews/meetings, presentations) and written (for designing and writing engaging reports which communicate recommendations and actions succinctly and clearly convey the message in a way which is appropriate for the audience, and rooted in the client’s needs).
• A keen eye for detail and strong focus on encouraging quality work by all team members, and a constructive approach to developing and mentoring colleagues with those goals in mind.
• Excellent project management skills and demonstrated ability to follow through and complete tasks within tight deadlines.

Preferred Experience

• Experience in business development or sales, including working on bid teams, and supporting winning proposals and RFP responses.
• Management and/or assessment of the adequacy of risk and controls over technology, cyber and third‑party risk at financial institutions.
• Knowledge of diverse compliance and regulatory frameworks, e.g., MAS Notices and Guidelines related to technology risk management, business continuity management and outsourcing governance, CSA, NIST, MTCS, ABS Cloud Guidelines, ISO 270XX, SOC‑1/2/3, etc.

Additional Experience

• Knowledge or familiarity with risk and security management tools (e.g., GRC, CyberArk, Zscaler, HSM).
• Knowledge or familiarity with third‑party risk management tools (e.g.: Coupa, Bitsight, OneTrust, etc).
• Knowledge or familiarity on workflow management tools (e.g., ServiceNow, JIRA), etc.
• Knowledge in cloud technologies of one or more cloud providers (e.g. Amazon Web Services, Google Cloud Platform, Microsoft Azure, Alibaba/Aliyun, etc.).

Education

Degrees/Field of Study preferred: Bachelor of Technology.

Certifications

None specified.

Required Skills

Not specified.

Optional Skills

Accepting Feedback, Active Listening, Analytical Thinking, Artificial Intelligence (AI) Platform, Auditing Methodologies, Cloud Engineering, Coaching and Feedback, Communication, Compliance and Governance, Compliance and Standards, Compliance Auditing, Corporate Governance, Creativity, Cybersecurity Governance, Cybersecurity Risk Management, Data Quality, Data Validation, Embracing Change, Emotional Regulation, Empathy, Governance Framework, Inclusion.

Desired Languages

Not specified.

Travel Requirements

Not Specified.

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

No