Tech Risk and Control Specialist (Onsite opportunity @ Singapore)

Smart Ims; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Smart IMS Inc is seeking a Technology Risk & Controls Specialist to join the APAC Risk & Controls function in Singapore. You will work across the corporate and investment banking technology estate, ensuring control gaps are identified, owned, and closed before regulators find them.

You will run end-to-end risk assessments, drive remediation, and coordinate with auditors and risk leads while influencing senior stakeholders and shaping risk mitigation strategies in a fast-paced, regionally scoped

Qualifications

• 4-6+ years in technology risk, technology audit, IT compliance or a control function, within banking or financial services
• Hands-on experience executing risk initiatives - not just coordinating them
• Application control testing experience
• Bachelor’s degree (IT, Computer Science, Information Systems, Accounting, Business or a related discipline)
• The confidence to voice an unpopular view to a senior stakeholder and hold it with evidence

Responsibilities

• Run risk assessment and RCSA cycles end to end across a portfolio of applications
• Drive issue identification, remediation planning, and validation of closure
• Track, monitor and accelerate technology risk issues to senior management using the bank’s established tooling and procedures
• Lead the response to internal audits, external audits, regulatory exams and clearing inquiries, coordinating across application groups, risk leads and Global Information Security
• Support business and process owners in remediating the highest-severity findings, including audit issues, self-identified issues, compliance-identified issues and regulatory issues
• Quality assurance testing over application controls
• Business continuity planning and testing for in-scope applications
• Sustainability program delivery and adoption of new risk tooling (including JIRA-based risk workflows)
• Manage senior stakeholder communication and reporting
• Develop and socialise risk mitigation strategies before they become mandates
• Champion an "identify, elevate, debate" culture rather than a tick-box one
• Find and fix the parts of the risk process that are slower than they need to be

Skills

Technology risk

IT audit

Regulatory knowledge

Stakeholder management

Education

Bachelor's degree

Tools

JIRA

Job description

We are looking for Technology Risk & Controls Specialist @ Singapore

Job Description :

About company :

Smart IMS Inc is providing Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to its customers in the Americas, Europe, Middle East, and Asia-Pacific. Smart IMS, a Microsoft Gold Certified Partner, Oracle Platinum Partner, AWS MSP Partner is a trusted technology and business partner delivering technology-enabled solutions to help companies grow their businesses and compete globally.

Work Location : Singapore(1 year renewable contract under SmartIMS Payroll)

Technology Risk & Controls Specialist

• Second-line technology risk global investment banking client

Where you'll sit

You’ll join the APAC Risk & Controls function of a top-tier global investment bank, working alongside Application Managers, enterprise control functions and business COOs across the corporate and investment banking technology estate.

This is a second-line seat. You’re not writing the code and you’re not writing the audit report you’re the person who makes sure control gaps get found, owned, and closed before a regulator finds them for you.

What you’ll actually do

Own the risk cycle

• Run risk assessment and RCSA cycles end to end across a portfolio of applications
• Drive issue identification, remediation planning, and validation of closure
• Track, monitor and accelerate technology risk issues to senior management using the bank’s established tooling and procedures

Handle regulators and auditors

• Assess regulatory change across APAC - MAS, HKMA, RBI, OJK, CBRC and others - and translate it into concrete technology and operational impact
• Lead the response to internal audits, external audits, regulatory exams and clearing inquiries, coordinating across application groups, risk leads and Global Information Security
• Support business and process owners in remediating the highest-severity findings, including audit issues, self-identified issues, compliance-identified issues and regulatory issues

Run the control programs

• Quality assurance testing over application controls
• Business continuity planning and testing for in-scope applications
• Sustainability program delivery and adoption of new risk tooling (including JIRA-based risk workflows)

Influence people who outrank you

• Manage senior stakeholder communication and reporting
• Develop and socialise risk mitigation strategies before they become mandates
• Champion an "identify, elevate, debate" culture rather than a tick-box one
• Find and fix the parts of the risk process that are slower than they need to be

What we’re looking for

Essential

• 4-6+ years in technology risk, technology audit, IT compliance or a control function, within banking or financial services
• Hands-on experience executing risk initiatives - not just coordinating them
• Application control testing experience
• Bachelor’s degree (IT, Computer Science, Information Systems, Accounting, Business or a related discipline)
• The confidence to voice an unpopular view to a senior stakeholder and hold it with evidence

Strongly preferred

• Exposure to the payments domain - cards, clearing, cross-border, or payment infrastructure
• Working knowledge of APAC regulatory frameworks, particularly MAS Technology Risk Management guidelines
• Experience leading programs that proactively surface regulatory exposure ahead of examination
• CISA, CRISC, CISM or CIA

Who this role suits

You’ll do well here if you’re coming from Big 4 IT audit or risk assurance and want to own outcomes instead of handing over a report, or from a bank internal audit or tech risk team and want broader regional scope and real regulatory exposure.

It’s probably not the right fit if you’re looking for a hands-on engineering or security architecture role - this is governance, assessment and influence, not build.

What we offer

• Direct exposure to one of the world's largest investment banks and its APAC regulatory landscape
• Regional scope across multiple markets and regulators