Tech Risk Assurance Manager – Regulatory & Cybersecurity

Ernst & Young LLP; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Ernst & Young LLP (EY) in Singapore is seeking a Manager to lead regulatory assurance engagements focused on technology risk management for financial institutions. You will oversee audit planning, execution and reporting, ensuring effective IT controls, cybersecurity, and regulatory compliance.

The role requires strong project management, analytical, and leadership abilities, with the capacity to mentor a team and guide clients on risk, control improvements and regulatory obligations.

Qualifications

• Bachelor's degree in information technology or related field; professional certifications preferred.
• Minimum 5 years in internal or external audit, risk management, or compliance within financial services IT/cybersecurity.
• Deep understanding of IT/cyber risk, regulatory standards (NIST, COBIT, ISO 2700x).

Responsibilities

• Lead and manage regulatory assurance engagements focused on technology risk management for financial institutions.
• Plan, coordinate, and execute audits of IT controls, cybersecurity, data privacy and regulatory reporting.
• Develop reports and present observations to boards or senior management.
• Mentor team members and improve audit processes and tools.
• Stay updated on regulatory changes and industry trends.

Skills

Project management

Analytical

Communication

Leadership

Teamwork

Regulatory knowledge

Cybersecurity

Education

Bachelor's IT

CISA

CISSP

CISM

Job description

Ernst & Young LLP (EY) in Singapore is seeking a Manager to lead regulatory assurance engagements focused on technology risk management for financial institutions. You will oversee audit planning, execution and reporting, ensuring effective IT controls, cybersecurity, and regulatory compliance.

The role requires strong project management, analytical, and leadership abilities, with the capacity to mentor a team and guide clients on risk, control improvements and regulatory obligations.