Senior Analyst / Assistant Vice President, Technology Risk Management (Risk Management Department)

SMBC Group; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

SMBC Group in Singapore is seeking a regional Technology Risk Manager to operationalize and maintain the Technology Risk Management Framework across APD/ID offices. You will assess cyber, resilience and regulatory risks, review risk assessments and remediation plans, and collaborate with IT, Compliance and Internal Audit to strengthen risk controls.

The role requires 3–5 years in technology risk domains, strong analytical skills, and hands-on experience with Power BI and Excel.

Qualifications

• Degree in Information Technology, Computer Science, Engineering, Information Systems or a related field.
• 3–5 years’ experience in Technology Risk, Cybersecurity, IT Audit, IT Compliance or Technology Governance, preferably in banking.
• Good knowledge of regional technology-risk regulations and standards (MAS TRM, NIST, ISO 27001, ITIL, COBIT).
• Ability to conduct regulatory and control gap assessments and provide independent 2LoD challenge.
• Strong analytical skills and practical experience with Power BI and advanced Excel.

Responsibilities

• Operationalize and maintain the regional Technology Risk Management Framework, policies, procedures and standards.
• Assess, monitor and report material technology, cyber, resilience and regulatory risks across APD/ID offices.
• Review and challenge risk assessments, controls, incidents, issues and remediation plans.
• Develop objective KRIs and management dashboards.
• Coordinate with IT, branches, Head Office, Compliance and Internal Audit.
• Prepare concise management reports and communicate risk to senior management.

Skills

Analytical skills

Stakeholder engagement

Regulatory awareness

Self-motivated

Communication

Education

Bachelor's degree in IT/CS/Engineering/IS

Tools

Power BI

Excel (Power Query, VBA/macros)

Power Apps

Power Automate

SharePoint

Job description

Job Responsibilities

• Operationalize and maintain the regional Technology Risk Management Framework, policies, procedures and standards.
• Assess, monitor and report material technology, cyber, resilience and regulatory risks across APD/ID offices.
• Review and challenge LoD1 and LoD1.5 risk assessments, controls, incidents, issues, risk acceptances and remediation plans.
• Review existing KRIs and develop objective risk indicators were justified by regulation or a material risk gap.
• Support oversight of critical systems, vulnerabilities, technology changes, recovery readiness and ageing technology.
• Coordinate with IT Dept, branches, Head Office, Compliance, Internal Audit and other risk functions.
• Support Compliance on regulatory gap assessments and tracking of implementation of new technology-risk requirements.
• Collaborate with other risk teams to assess Technology Risk in the context of Enterprise Risk, Operational Risk, Operational Resilience, BCM, Third Party Risk and AI Risk Management.
• Prepare concise management reports, dashboards and thematic risk analysis.
• Communicate technical risks clearly to senior management and non-technical stakeholders.
• Promote consistent Technology Risk practices and a strong risk culture across APD/ID.

Analytics And Automation Responsibilities

• Analyze risk, incident, vulnerability, issue and remediation data to identify trends and emerging risks.
• Develop management dashboards using Microsoft Power BI.
• Use advanced Microsoft Excel, including formulas, Power Query, pivot tables and VBA/macros, to improve analysis and reporting.
• Automate recurring reporting and workflow activities using Microsoft tools.
• Experience with Power Apps, Power Automate and SharePoint would be an advantage.
• Translate business and risk requirements into practical dashboards, workflows and management information.

Job Requirements

• Degree in Information Technology, Computer Science, Engineering, Information Systems or a related field.
• 3 - 5 years’ experience in Technology Risk, Cybersecurity, IT Audit, IT Compliance or Technology Governance, preferably in banking.
• Good knowledge of regional technology-risk regulations and recognized standards, such as MAS TRM, NIST Cybersecurity Framework, ISO 27001, ITIL and COBIT.
• Ability to conduct regulatory and control gap assessments and provide independent 2LoD challenge.
• Strong analytical skills and practical experience with Power BI and advanced Excel.
• Power Apps, Power Automate, SharePoint, VBA/macros or similar workflow-automation experience is advantageous.
• Professional certification such as CISA, CISM, CRISC or CISSP is advantageous.
• Strong written communication, management-reporting and stakeholder-engagement skills.
• Self-motivated, culturally sensitive and able to manage multiple priorities across regional stakeholders.