Senior Manager, Data Protection & Cyber Risk

IBFSG - The Institute of Banking & Finance Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

IBF Singapore invites applications for a role leading Data Protection & Governance, IT risk and audit/compliance functions. You will serve as DPO, shaping policy and controls across the PDPA landscape while guiding DPIAs and privacy-by-design practices.

You will coordinate risk reporting, audit outcomes and BCM readiness, partnering with stakeholders to strengthen IT security and governance. The role encompasses data protection oversight, incident response coordination and strategic governance

Qualifications

• Strong knowledge of the PDPA and data governance practices.
• Experience in risk management, audit/compliance, incident management and stakeholder engagement.
• Good understanding of IT and cybersecurity risk concepts, controls and practices.
• Familiarity with ISO/IEC 27001, NIST CSF, MAS TRM is an advantage.
• Hands-on experience in IT security activities (system audits, vulnerability scanning, firewall rule reviews, system hardening) is an advantage.
• Familiarity with cybersecurity tooling (PAM, IAM, SIEM) is an advantage.
• Relevant certifications (CISSP, CISA, CISM, CRISC, Security+, CEH, GSEC) are an advantage.
• Knowledge of cloud security is an advantage.
• Driven, meticulous and with a strong eye for detail.
• Good written and verbal communication skills.
• Strong interpersonal and stakeholder management skills.

Responsibilities

• Serve as the organisation’s Data Protection Officer (DPO) and ensure PDPA compliance.
• Develop, implement and continuously improve data protection policies, procedures and contractual frameworks.
• Drive initiatives to achieve and maintain the Data Protection Trustmark (DPTM) certification.
• Advise business units on Data Protection Impact Assessments (DPIAs) and privacy-by-design best practices.
• Support enterprise risk management by providing risk advisory to IT and business stakeholders on technology and cybersecurity risks.
• Coordinate technology and cybersecurity incident response, including triage, communications, and post-incident reviews.
• Prepare and present periodic risk reporting to Management and relevant committees.
• Act as the main liaison for external IT audits and drive timely closure of audit findings.
• Oversee IT audit follow-ups and strengthen internal controls to address identified gaps.
• Support governance reporting and ensure alignment with regulatory and organisational requirements.
• Support business continuity and crisis management by implementing relevant frameworks and BCM readiness exercises.
• Provide end-to-end secretariat support for the Management Risk and Audit Committees.

Skills

PDPA knowledge

Data governance practices

Risk management

Audit/compliance

Incident management

Stakeholder engagement

Communication skills

Interpersonal skills

Tools

PAM

IAM

SIEM

Job description

IBF Singapore invites applications for a role leading Data Protection & Governance, IT risk and audit/compliance functions. You will serve as DPO, shaping policy and controls across the PDPA landscape while guiding DPIAs and privacy-by-design practices.

You will coordinate risk reporting, audit outcomes and BCM readiness, partnering with stakeholders to strengthen IT security and governance. The role encompasses data protection oversight, incident response coordination and strategic governance