Senior Technology Risk Analyst

SPH Media Trust; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a Senior Technology Risk Analyst to enhance its risk management framework. In this pivotal role, you will collaborate with key stakeholders and the Cybersecurity team to identify, assess, and mitigate IT risks while ensuring compliance with policies and standards. Your expertise will guide the continuous improvement of risk processes and support the rollout of innovative risk and compliance tools. This position offers a unique opportunity to contribute to the organization's proactive compliance approach and refine cybersecurity policies in line with best practices. Join a dynamic team dedicated to safeguarding technology assets and driving process excellence.

Qualifications

• Experience in risk assessment and compliance management is essential.
• Strong analytical skills to compile and analyze risk data.

Responsibilities

• Support stakeholders in understanding risk processes and compliance.
• Maintain the division’s risk register and prepare regular reports.

Skills

Risk Assessment

Compliance Management

Data Analysis

Stakeholder Management

Cybersecurity Best Practices

Education

Bachelor's Degree in Information Technology or related field

Certifications in Risk Management or Cybersecurity

Tools

Risk & Compliance Tool

SDLC Documentation Tools

Job description

Job Summary:

As a Senior Technology Risk Analyst, you will support the Tech Risk Manager in all risk & compliance related activities for SPH Media Technology division. You will work with our stakeholders (the Heads and nominated Subject Matter Experts across the Technology Division) and Cybersecurity team to manage all IT risks and support process improvement activities.

Job Description:

• Supporting stakeholders in understanding the risk process and risk assessment criteria.
• Working with key stakeholders to establish compliance with policies & standards, ensuring that identified risks and gaps are adequately addressed and remediated.
• Continuously evaluate risk mitigation measures to ensure effectiveness, compliance and adherence to key controls and policies and to support teams on the remediation efforts.
• Maintaining the division’s risk register.
• Working with stakeholders to update the risk register to add new risks and ensure existing risks stay relevant tracking and updating risk mitigation & remediation action plans.
• Managing the policy waiver/exception process.
• Preparing regular reports on risks, action plans and waiver/exception status.
• Compiling and analysing risk data to prepare graphs and dashboards for management.
• Supporting the Tech Risk Manager in risk meetings within Tech and with the organisation’s risk department.
• Supporting the Tech Risk Manager in the roll out of Risk & Compliance tool for the organisation.
• Supporting process improvement activities, including creating and updating process documents, especially in SDLC and IT policy areas.
• Collaborate with internal and external audit teams, to manage and effect audits from a compliance & point-in-time perspective, to a risk-driven, continuous proactive compliance approach.
• Participate in the review and refinement of cybersecurity policies, standards, processes, procedures and guidelines in accordance with cybersecurity best practices.