Senior Manager, Technology Risk

OSL; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

OSL is seeking a Senior Manager, Technology Risk to lead development and oversight of the Technology Risk Management Framework across its global digital asset trading and payments businesses. The role encompasses governance, cyber risk, resilience, third-party risk and regulatory compliance, with an emphasis on independent challenge to Technology, Engineering, Product, Cybersecurity and Operations teams.

You will lead the second-line risk function, ensuring risks are identified, assessed and

Qualifications

• 8–10+ years in Technology or Operational Risk within regulated industries.
• Strong governance, controls, risk assessments, resilience and change management.
• Solid cybersecurity, cloud, app security, access management knowledge.
• Experience with RCSA, KRI monitoring, incident management and RCA.
• Regulatory experience with financial regulators.

Responsibilities

• Lead the Technology Risk Management Framework globally across entities and business lines.
• Provide independent second-line challenge to Engineering, Product, IT and Cybersecurity on key technology risks.
• Oversee governance, cyber risk, resilience, third-party risk and technology operations.
• Monitor compliance with applicable Technology Risk Management, cybersecurity and regulatory requirements.
• Coordinate risk reporting for senior management and risk committees.
• Lead Risk and Control Self-Assessment (RCSA) exercises and establish KRIs.

Skills

Second-line governance

Technology risk governance

Cyber risk & infrastructure

Risk methodology

Regulatory experience

Stakeholder management

Digital asset knowledge

Job description

As the Senior Manager, Technology Risk, you will lead the development and oversight of the Technology Risk Management Framework across the firm's global digital asset trading and payments businesses.

Acting as an independent second-line risk function, you will provide effective challenge to Technology, Engineering, Product, Cybersecurity and Operations teams, ensuring technology risks are appropriately identified, assessed, monitored and controlled. The role will cover technology governance, cyber risk, resilience, infrastructure, change management and third-party technology risk, while maintaining oversight of key operational risks arising from technology and business processes.

Key Responsibilities

1. Technology Risk Governance

• Lead and continuously enhance the Technology Risk Management Framework across global entities and business lines.
• Establish technology risk policies, standards, risk appetite, KRIs and control requirements.
• Provide independent second-line challenge to Engineering, Product, IT and Cybersecurity teams on key technology risks and control environments.
• Assess technology risks arising from new products, systems, infrastructure, platforms and strategic initiatives.

2. Technology & Cyber Risk Oversight

• Oversee risks relating to system architecture, cloud infrastructure, application security, software development, change management and technology operations.
• Conduct risk assessments covering critical systems, APIs, wallet infrastructure, exchange platforms and other technology environments.
• Challenge the management of vulnerabilities, access controls, cybersecurity risks and technology control weaknesses.
• Monitor compliance with applicable Technology Risk Management, cybersecurity and regulatory requirements.

3. Operational Resilience & Third-Party Risk

• Provide second-line oversight of technology resilience, Business Continuity Planning (BCP) and Disaster Recovery (DR) capabilities.
• Review and challenge resilience testing, recovery capabilities and cyber resilience exercises for critical systems.
• Provide second-line oversight of Third-Party Risk Management (TPRM), particularly for critical technology and infrastructure providers.
• Maintain oversight of operational risks arising from technology failures, system incidents and key business processes.
• Lead Risk and Control Self-Assessment (RCSA) exercises across key technology and operational functions.
• Establish and monitor KRIs and risk indicators for material technology and operational risks.
• Oversee the second-line review of technology, cyber and operational incidents, including Root Cause Analysis (RCA) and remediation tracking.
• Identify recurring control weaknesses and drive improvements to the overall risk and control environment.

5. Regulatory & Senior Stakeholder Engagement

• Act as a key risk contact for regulators during audits, licensing reviews and supervisory examinations relating to technology and operational risk.
• Translate regulatory requirements into practical technology risk and control expectations.
• Prepare technology risk reporting for senior management and relevant risk committees.
• Partner with Technology, Engineering, Cybersecurity, Product and Operations leadership to strengthen the overall risk environment.

Professional Experience

• Experience: 8–10+ years of experience in Technology Risk, IT Risk, Cyber Risk or Operational Risk, preferably within financial services, fintech or other highly regulated industries.
• Technology Risk Expertise: Strong experience in second-line technology risk governance, technology controls, IT risk assessments, resilience and change management.
• Cyber & Infrastructure: Good understanding of cybersecurity, cloud infrastructure, application security, access management, vulnerability management and technology architecture.
• Risk Methodology: Strong knowledge of RCSA, KRI monitoring, incident management, scenario analysis, risk assessments and Root Cause Analysis.
• Regulatory Experience: Experience working with financial regulators and technology risk / operational resilience requirements.
• Stakeholder Management: Ability to provide effective challenge and influence senior Technology, Engineering, Cybersecurity, Product and Operations stakeholders.
• Digital Asset Knowledge: Familiarity with blockchain infrastructure, custody architecture, smart contract risks, digital asset exchanges or payments is preferred.

Vision & Mission

• OSL is the first SFC-licensed digital asset platform in Hong Kong and a PayFi innovator. Through stablecoin payments, cross-border settlement and global licensing, we are building the next-generation payments network. Stablecoins have become everyday money across emerging markets and are widely viewed as blockchain’s “killer app,” with industry focus shifting from token issuance to real-world consumer and enterprise payment adoption. The strongest growth lies in cross-border B2B payments, where providers embedding stablecoins into corporate settlement flows can capture significant volume and float. Long-term defensibility comes from regulatory licences, banking partners and cross-border corridors.
• OSL holds or has acquired licences in Hong Kong, Japan, Australia, Bermuda and Indonesia, and is expanding into Europe, Brazil, Southeast Asia and Africa through acquisitions and licence applications. With OSL Pay and StableX, we embed stablecoin settlement into bank accounts and card networks, support 150+ digital assets, and provide 24/7 fiat–stablecoin conversion. As a regulated pioneer with a startup mindset, we believe the future of payments will be driven by real adoption and scalable deployment, not technology narratives. We welcome builders who are passionate about crypto and payments to join us in shaping compliant, global payment infrastructure.