Senior InfoSec & Third-Party Risk Manager

OCBC (Singapore); Singapore; On-site; SGD 150,000 - 200,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits

Industry-leading learning & career dev

Job summary

OCBC Group is seeking an Information Security and Digital Risk Management Specialist in Singapore to safeguard the bank's digital ecosystem and strengthen resilience against evolving tech and cyber risks.

You will conduct independent reviews of digital risks from third‑party arrangements, assess controls, and provide assurance on policies and regulatory requirements. Strong leadership and stakeholder engagement are essential.

Qualifications

• Degree in Computer Science, Information Security, or related discipline.
• Eight+ years of experience in technology, information, or cyber risk management.
• At least five years hands-on in third‑party risk management, preferably in financial services.
• Certifications such as CISSP, CISA, CISM are advantageous.
• Strong knowledge of network/system security, cloud platforms, and third‑party assurance artefacts.

Responsibilities

• Conduct digital risk assessments and due diligence on third‑party providers.
• Develop and maintain third‑party risk policies and frameworks.
• Collaborate with technology, business and control functions for end‑to‑end risk management.
• Lead or support data‑driven risk initiatives and insights for decision‑making.
• Monitor and report on technology and cyber risk posture related to third‑party services.
• Support MAS guidelines compliance and regulatory requirements.
• Provide training on technology risk and third‑party risk management.

Education

Degree in Computer Science, Information Security, or related discipline

Tools

AWS

Azure

SOC 2

OSPAR

Job description

OCBC Group is seeking an Information Security and Digital Risk Management Specialist in Singapore to safeguard the bank's digital ecosystem and strengthen resilience against evolving tech and cyber risks.

You will conduct independent reviews of digital risks from third‑party arrangements, assess controls, and provide assurance on policies and regulatory requirements. Strong leadership and stakeholder engagement are essential.