Senior InfoSec & Third-Party Risk Lead

OCBC Bank; Singapore; On-site; SGD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive base salary

Comprehensive benefits

Community initiatives

Professional development

Job summary

OCBC Bank in Singapore seeks a senior Information Security and Digital Risk Management Specialist to safeguard the Group’s digital ecosystem and manage third-party risk. You will conduct risk assessments, implement controls, and advise on governance across technology, business, and control functions.

You will lead or support data-driven insights, policy development, and training to promote consistent risk management, with emphasis on MAS guidelines and regulatory alignment.

Qualifications

• Degree in Computer Science, Information Security, or related field.
• 8+ years in technology, information, or cyber risk management.
• 5+ years in third-party risk management in financial services.
• Certs: CISSP, CISA, CISM advantageous.
• Experience with AI risk, governance and data security.
• Knowledge of MAS guidelines and local regulatory frameworks.

Responsibilities

• Conduct digital risk assessments and due diligence of third-party providers.
• Develop and maintain third-party risk policies and frameworks.
• Collaborate across technology, business, and control functions for end-to-end risk management.
• Lead data-driven risk insights and reporting to senior management.
• Provide training and awareness on technology and third-party risk management.

Skills

Cyber risk management

Third-party risk management

Cloud security (AWS/Azure)

Threat assessment

Stakeholder communication

Education

Degree in Computer Science or Information Security

Tools

SOC 2

OSPAR

NIST SP 800-53

ISO/IEC 27001

Job description

OCBC Bank in Singapore seeks a senior Information Security and Digital Risk Management Specialist to safeguard the Group’s digital ecosystem and manage third-party risk. You will conduct risk assessments, implement controls, and advise on governance across technology, business, and control functions.

You will lead or support data-driven insights, policy development, and training to promote consistent risk management, with emphasis on MAS guidelines and regulatory alignment.