Tech Risk & Third-Party Security Engineer

IoTalents Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

IoTalents Pte. Ltd. seeks an experienced Cybersecurity & Technology Risk Engineer to support technology risk management, third-party security assessments, and vendor due diligence.

You will assess information security and technology risks, review controls and documentation, identify gaps, and provide practical remediation recommendations. Strong analytical and stakeholder-management skills are essential, with MAS guidelines familiarity a plus.

Qualifications

• Minimum 5 years of experience in technology risk, cybersecurity, information security, IT audit, or vendor/third-party risk management.
• Strong understanding of third-party risk management, vendor due diligence, and security assessments.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk.
• Familiarity with MAS TRM Guidelines and MAS Outsourcing Guidelines is preferred.
• Certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Responsibilities

• Conduct third-party, vendor, and outsourcing risk assessments.
• Perform security due diligence and review vendors’ security controls, policies, certifications, and audit reports.
• Assess information security, technology, cloud, compliance, and outsourcing risks.
• Identify control gaps, risks, and remediation needs.
• Prepare risk assessment reports, findings, and recommendations.
• Collaborate with business, technology, cybersecurity, compliance, and vendor stakeholders.
• Support ongoing technology risk and third-party risk management activities.

Skills

Vendor risk management

Third-party risk assessments

Security risk assessments

Report writing

Stakeholder management

Analytical thinking

Technology risk knowledge

Tools

CISSP

CISA

CRISC

CISM

ISO 27001

Job description

IoTalents Pte. Ltd. seeks an experienced Cybersecurity & Technology Risk Engineer to support technology risk management, third-party security assessments, and vendor due diligence.

You will assess information security and technology risks, review controls and documentation, identify gaps, and provide practical remediation recommendations. Strong analytical and stakeholder-management skills are essential, with MAS guidelines familiarity a plus.