Security Risk Management Consultant

infinite Computer Solution; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

infinite Computer Solution in Singapore seeks a Security Risk Management Consultant with 6+ years of experience to drive third-party risk programs. You will assess technology and information security risks, review cloud security controls, and coordinate remediation actions for outsourcing governance.

This six-month extendable contract requires strong analytical and stakeholder skills. The role focuses on conducting risk assessments, vendor due diligence, and ensuring compliance with banking

Qualifications

• Experience in Third-Party Risk Management and vendor risk assessments.
• Proven ability to conduct due diligence reviews and security assessments.
• Capability to review security controls and identify gaps.
• Exposure to technology risk, information security or cybersecurity domains.
• Knowledge of cloud security controls and regulatory expectations.
• Strong analytical, documentation and stakeholder management skills.
• Familiarity with MAS Technology Risk requirements is a plus.

Responsibilities

• Conduct Third-Party Risk Management (TPRM) and Vendor Risk Assessments.
• Perform Vendor Due Diligence reviews and security assessments.
• Conduct security control reviews and control gap assessments.
• Assess technology, cybersecurity, and information security risks from third parties.
• Review cloud security controls and regulatory requirements for security compliance.
• Support outsourcing risk management and governance activities.
• Prepare risk assessment reports, findings and remediation recommendations.
• Engage stakeholders and present assessment outcomes.

Skills

TPRM

Vendor Risk Management

Due Diligence

Security Assessments

Control Gap Assessments

Technology Risk

Information Security

Cybersecurity

Stakeholder Management

Job description

Position Details

• Position: Security Risk Management Consultant
• Open Positions: 2
• Experience: 6+ Years
• Location: Singapore
• Start Date: 01-Oct-2026
• Duration: 6 Months (Extendable)

Scope of Work

The selected consultants will be responsible for:

• Conducting Third-Party Risk Management (TPRM) and Vendor Risk Assessments.
• Performing Vendor Due Diligence reviews and security assessments.
• Conducting security control reviews and control gap assessments.
• Assessing technology, cybersecurity, and information security risks associated with third parties.
• Reviewing cloud security controls and cybersecurity compliance requirements.
• Supporting outsourcing risk management and governance activities.
• Preparing risk assessment reports, findings, and remediation recommendations.
• Engaging stakeholders and presenting assessment outcomes.
• Supporting compliance with MAS Technology Risk Management expectations and banking regulatory requirements.

Key Skills Required

• Third-Party Risk Management (TPRM)
• Vendor Risk Management and Due Diligence
• Security Assessments and Control Gap Assessments
• Technology Risk, Information Security, or Cybersecurity
• Cloud Security and Cybersecurity Controls
• Strong Analytical, Documentation, and Stakeholder Management Skills
• Familiarity with MAS Technology Risk requirements is preferred