Security Risk Manager (Banking, TPRM, Control Gap Assessment, MAS TRM, IT Audit)

EVYONIC SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

EVYONIC SOLUTIONS PTE. LTD. in Singapore seeks a senior professional to lead Third-Party Risk Management activities, conduct security assessments, and drive remediation across technology and third-party environments.

The role requires extensive Banking/Financial Services sector experience, strong regulatory engagement, and proven internal audit coordination with senior stakeholders.

Qualifications

• Bachelor of Engineering degree or equivalent technical qualification.
• 18+ years of experience in TPRM, Cybersecurity, Information Security, Regulatory Engagement, and Internal Audit.
• Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
• Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation.
• Strong experience performing Security Assessments and control gap assessments.
• Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
• Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
• Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
• Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.

Responsibilities

• Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking.
• Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps.
• Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments.
• Review security policies and risk frameworks and recommend improvements to strengthen security governance.
• Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk.
• Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up.
• Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions.
• Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders.
• Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure.

Skills

TPRM

Cybersecurity

Information Security

Risk assessment

Regulatory engagement

Internal Audit

Stakeholder management

Audit coordination

Remediation planning

Education

Bachelor of Engineering degree or equivalent

Job description

Responsibilities:

• Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking.
• Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps.
• Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments.
• Review security policies and risk frameworks and recommend improvements to strengthen security governance.
• Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk.
• Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up.
• Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions.
• Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders.
• Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure.

Requirements:

• Bachelor of Engineering degree or equivalent technical qualification.
• 18+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit.
• Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
• Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation.
• Strong experience performing Security Assessments and control gap assessments.
• Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
• Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
• Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
• Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.