Security Risk Management Consultant

Infinite Computer Solutions Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Infinite Computer Solutions Pte Ltd in Singapore is seeking a Security Risk Management Consultant with 6+ years of experience for a 6-month engagement. You will assess third-party risk, conduct vendor due diligence, and review security controls for cloud and on-premise environments.

You will prepare risk assessment reports, engage stakeholders, and help ensure compliance with MAS Technology Risk Management expectations and banking regulations.

Qualifications

• Conduct TPRM and vendor risk assessments.
• Perform vendor due diligence reviews and security assessments.
• Conduct security control reviews and gap assessments.
• Assess technology, cybersecurity, and information security risks from third parties.
• Review cloud security controls and compliance requirements.
• Support outsourcing risk management and governance.
• Prepare risk assessment reports, findings and remediation recommendations.
• Engage stakeholders and present assessment outcomes.
• Support MAS technology risk management expectations and banking regulations.

Responsibilities

• Conduct TPRM and vendor risk assessments.
• Perform vendor due diligence reviews and security assessments.
• Conduct security control reviews and gap assessments.
• Assess technology, cybersecurity, and information security risks from third parties.
• Review cloud security controls and compliance requirements.
• Support outsourcing risk management and governance.
• Prepare risk assessment reports, findings and remediation recommendations.
• Engage stakeholders and present assessment outcomes.
• Support MAS technology risk management expectations and banking regulations.

Skills

TPRM

Vendor risk mgmt

Due diligence

Security assessments

Control gaps

Technology risk

Information security

Cybersecurity

Cloud security

Stakeholder mgmt

MAS risk reqs

Job description

• Position: Security Risk Management Consultant
• Experience: 6+ Years
• Location: Singapore
• Duration: 6 Months (Extendable)

Scope of Work

The selected consultants will be responsible for:

• Conducting Third-Party Risk Management (TPRM) and Vendor Risk Assessments.
• Performing Vendor Due Diligence reviews and security assessments.
• Conducting security control reviews and control gap assessments.
• Assessing technology, cybersecurity, and information security risks associated with third parties.
• Reviewing cloud security controls and cybersecurity compliance requirements.
• Supporting outsourcing risk management and governance activities.
• Preparing risk assessment reports, findings, and remediation recommendations.
• Engaging stakeholders and presenting assessment outcomes.
• Supporting compliance with MAS Technology Risk Management expectations and banking regulatory requirements.

Key Skills Required

• Third-Party Risk Management (TPRM)
• Vendor Risk Management and Due Diligence
• Security Assessments and Control Gap Assessments
• Technology Risk, Information Security, or Cybersecurity
• Cloud Security and Cybersecurity Controls
• Strong Analytical, Documentation, and Stakeholder Management Skills
• Familiarity with MAS Technology Risk requirements is preferred