Senior Analyst, Risk Management Systems & Infrastructure

SMBC Group; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

SMBC Group in Singapore seeks a Senior Analyst to support the Risk Management Systems & Infrastructure function. You will help operate, enhance and roll out the bank’s GRC system across APAC, ensuring access controls, master data and configurations align with IT security policies.

Under supervision, you will assist with RCSA coordination, regional rollout of New Product Approval, data governance and user guidance.

Qualifications

• Bachelor's degree in a relevant discipline.
• Minimum 3 years of experience in GRC system implementation, administration or support.
• Hands-on experience with GRC platforms (e.g., Archer) including workflow configuration, data import and access roles.
• Ability to translate business requirements into system requirements and explain processes to non-technical users.

Responsibilities

• System Administration and Access Management Support across APAC offices.
• Coordinate Risk Register (RCSA) exercise coordination and related stakeholder management.
• Regional rollout and system enhancement for APAC branches (e.g., New Product Approval).
• Develop and maintain user guides, training materials and provide end-user support.

Skills

Stakeholder management

Teamwork

Communication

Business requirements to system

GRC knowledge

Education

Bachelor's degree in Business/IS/Analytics

Tools

Archer

Job description

Risk Management Systems & Infrastructure

Support the operation, enhancement and regional rollout of the bank’s risk management (GRC) system, which underpins key risk management processes such as Risk and Control Self-Assessment (Risk Register), Issues and Operational Risk Events, and New Product Approval. Specifically, this includes

• Ensure the stable and well-controlled operation of the GRC system across APAC offices, including user access, master data and system configuration.
• Coordinate region-wide risk management exercises run on the system, such as the semi-annual Risk Register exercise, working closely with 1st and 2nd Line of Defense stakeholders.
• Drive the rollout of system modules to other APAC branches and support continuous enhancement, testing and adoption of the system, as well as related data governance initiatives.

Job Responsibilities :

Under the guidance and supervision of senior staff, the Senior Analyst will support the Risk Management Planning team in performing selected responsibilities from the following areas:

• System Administration and Access Management Support

Manage user account creation and role assignments (including bulk uploads), set up and validate master data such as organization hierarchy and risk taxonomy mappings, maintain the User Access Matrix, and resolve configuration or data issues in the production environment in line with internal IT security policies.

• Risk Register (RCSA) Exercise Coordination Support

Prepare and confirm stakeholder assignments, launch the exercise, monitor progress and follow up with assessors, SMEs and reviewers across APAC offices, consolidate 2nd Line review comments for feedback to 1st Line, and support the closure of each assessment cycle.

• Regional Rollout and System Enhancement Support

Support the onboarding of APAC branches to system modules (e.g., New Product Approval), including implementation planning, data migration templates, user training, test scenario design and UAT coordination. Gather business requirements, liaise with the vendor and IT teams on defects and enhancements, and support post-deployment verification.

• User Guidance and Documentation Support

Develop and maintain user guides, guidance materials and FAQs for different user roles, and provide day-to-day helpdesk support to system users across the region.

Job Requirements :

• University Graduate (BA), preferably in Business, Information Systems, Analytics or a related discipline
• Minimum 3 years of experience in GRC system implementation, administration or support, or in operational/enterprise risk management in a bank or a consulting firm serving financial institutions
• Hands-on experience with GRC platforms (e.g., Archer) including workflow configuration, data import and access roles, as well as SIT/UAT execution, is preferred. Relevant certifications are an advantage
• Ability to translate business requirements into system requirements, and to explain system processes clearly to non-technical users
• Proactive self-starter with strong teamwork abilities and stakeholder management skills
• Able to multi-task under tight timelines
• Strong verbal and written communication skills. Native-level English proficiency is required
• Culturally sensitive