Tech Risk Supervisor

Government Technology Agency (GovTech); Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

The Government Technology Agency (GovTech) invites experienced technology risk professionals to join a MAS-supervision focused team in Singapore. You will supervise banks on technology risk management and cyber security programs, assessing adequacy and directing actions.

You will conduct boardroom discussions with board and senior IT leaders, review governance, and perform on-site/off-site inspections across control areas such as privileged access, resilience, SDLC, incident management and

Qualifications

• Aptitude and strong interest in IT/cybersecurity audit/risk assessment.
• Excellent written and spoken English with clarity and precision.
• Team player with ability to work across organizational lines.
• Self-starter, methodical in task execution and meticulous in deliverables, with project management skills.
• May be required to complete a medical declaration and/or undergo further assessment.
• Shortlisting occurs within 4 weeks of the closing date.

Responsibilities

• Conduct Boardroom / C-suite conversations with banks’ Board and Senior Management on IT governance and cyber risk management.
• Engage CIO/CISO on IT governance, technology and cyber risk management and compliance matters.
• Perform onsite and offsite inspections of banks and financial institutions on control areas (e.g., privileged access, cyber security measures, SDLC, DR/BC).
• Assess and provide professional opinions on risk rating, supervisory messages and directions to banks.
• Oversee management of IT and cyber incidents, root cause analysis, disaster recovery, and incident response.
• Research emerging technology and cyber risk issues and propose supervisory responses.
• Support MAS policies and supervision methodologies.

Skills

IT/cybersecurity audit

risk assessment

IT governance

stakeholder management

Job description

What the role is

You will be part of a team of experienced technology and cyber risk management professionals tasked to supervise some of the most important and largest local and foreign bank s in Singapore on their technologyIT implementation strategy and their management of technology risk management and cyber security. You will closely oversee and assess the adequacy of the banks’ technology risk management and cyber security plans and programmes, take supervisory actions on lapses, direct the banks on actions needed and advise MAS lead supervising departments as well as senior management on your professional assessments.

What you will be working on

Conduct Boardroom / C-suite conversations with banks’ Board and Senior Management, closely and regularly engage banks’ IT/security/risk management leadership (CIO/CISO) on IT governance, technology and cyber risk management and compliance matters, and deep dive with banks’ IT professionals and internal/external auditors on IT/security architecture, implementation and operations matters. Onsite and offsite inspections of banks and other financial institutions (including Domestic Systematically Important Banks, Critical Information Infrastructure Owners/Operators and global banks) on thematic control areas, such as privileged access management, network/system resilience, cyber security measures, Secure Development Lifecycle (SDLC), IT service management, change management, disaster recovery, incident/problem management, operational processes, IT third party risk management and IT governance (e.g. Three-Lines of Defence model). Assessment of adequacy of Technology Risk Management (including cyber security), with a comprehensive review / benchmarking of all technology and cyber risk control areas and provide professional opinion on risk rating, supervisory messages and directions to the banks. Oversee and guide FIs’ management of IT and cyber incidents, including timely response & recovery, adequate root cause analysis, disaster recovery, business continuity management, public communications and subsequent remediations of control gaps. Assess banks’ breaches of MAS regulations, recommendation on supervisory actions, issuance of directions to banks on actions needed, monitoring and assessment of banks’ progress. Research on emerging technology and cyber risk issues as manifested/forecasted in the banks within the team’s portfolio or as assigned, formulate an assessment and supervisory response, presentation of findings and seek approval of recommendations, and manage issues / implement solutions / issue guidance to banks. Provide professional input to MAS’ technology and cyber risk management policies and supervision methodologies. Support Team, Division, Department, Group and MAS roles and duties such as meetings secretariat, management reports, response to public & parliamentary queries, FI incident reporting, escalation to management and MAS crisis management.

What we are looking for

• Candidate should have the aptitude and strong interest in IT/cybersecurity audit/risk assessment, with an enquiring and critical mind.
• Candidates with relevant working experience (including in related technology risk and cyber security areas) can be considered for more senior positions.
• Candidate should have excellent written and spoken communication skills in English, with a conversation and writing style that emphasizes clarity/readability, robust logic and precision.
• Candidate should be a team player, be able to support & complement team members and work across organisational lines.
• Candidate should be a self-starter, methodical in task execution and meticulous in task deliverables, with key project management skills that include working with limited resources & tight timelines, innovative problem solving and excellent stakeholder management.
• As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.
• All applicants will be notified on whether they are shortlisted or not within 4 weeks of the closing date of this job posting.

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services. Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you. The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development. Be part of the team that shapes the future of Singapore.