Security Risk Manager (Banking, Third-Party Risk Management, Information Security, Security Assessments, Regulatory Engagement, Internal Audit)

EVYONIC SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 180,000 - 300,000; Full time

Job summary

EVYONIC SOLUTIONS PTE. LTD. seeks a senior professional to lead Third-Party Risk Management and drive cybersecurity risk assessments across banking environments.

The role requires extensive experience in regulatory engagement and internal audit coordination, with a strong focus on risk mitigation and evidence gathering for stakeholders.

Qualifications

• Bachelor-level engineering or equivalent technical qualification required.
• 14+ years in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement and Internal Audit.
• Strong Banking/Financial Services domain experience preferred.
• Experience with third-party cyber risk assessments and evidence gathering.
• Knowledge of cybersecurity controls, policies, standards, and risk frameworks.
• Experience coordinating with regulatory stakeholders and internal audit teams.

Responsibilities

• Lead Third-Party Risk Management activities including cyber risk assessments and evidence gathering.
• Conduct security assessments and control gap analyses to identify risks and gaps.
• Assess cybersecurity risks, controls, policies, and standards across relevant environments.
• Review information security policies, standards, and risk frameworks; recommend improvements.
• Support regulatory engagement activities related to cybersecurity and information security.
• Coordinate internal audit engagements, including evidence gathering and follow-up.
• Analyze assessment findings and recommend risk mitigation actions.
• Prepare assessment documentation, reports, and stakeholder recommendations.
• Collaborate with stakeholders to address identified risks and implement improvements.

Skills

Third-Party Risk Management

Cybersecurity

Information Security

Security Assessments

Regulatory Engagement

Internal Audit

Stakeholder Management

Report Writing

Education

Bachelor of Engineering degree or equivalent

Job description

Responsibilities:

• Lead Third-Party Risk Management activities, including third-party cyber risk assessments and evidence gathering.
• Conduct Security Assessments and control gap assessments to identify security risks and gaps.
• Assess Cybersecurity risks, controls, policies, and standards across relevant environments.
• Review Information Security policies, standards, and risk frameworks and recommend improvements.
• Support Regulatory Engagement activities related to Cybersecurity and Information Security.
• Coordinate Internal Audit engagements, including audit-team liaison, evidence gathering, and follow-up.
• Analyse security assessment findings and identify appropriate risk mitigation actions.
• Prepare assessment documentation, reports, and recommendations for stakeholders.
• Work with stakeholders to address identified risks and implement feasible security improvements.

Requirements:

• Bachelor of Engineering degree or equivalent technical qualification.
• 14+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit.
• Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
• Strong experience in Third-Party Risk Management, including third-party cyber risk assessment and evidence gathering.
• Strong experience performing Security Assessments and control gap assessments.
• Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
• Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
• Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
• Strong analytical, documentation, report-writing, communication, and stakeholder management skills.