Technology Assurance Specialist

Singapore Exchange Limited; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Singapore Exchange Limited is seeking a Line 1.5 assurance professional to independently validate Technology controls, focusing on design and operating effectiveness across cybersecurity, IT operations, data governance, and change management.

Role requires a Bachelor's degree with 5–7 years in financial institutes' technology risk, plus certifications like CISA/CISM. Strong data analytics, BI tools proficiency, and knowledge of MAS requirements are essential.

Qualifications

• Bachelor's degree in a technology or risk role; 5–7 years in Technology Risk Management/Audit/Governance within financial services.
• Professional certifications such as CISA, CISM, CISSP, CRISC or equivalent are preferred.
• Strong understanding of IT processes (SDLC, change management, cloud, infrastructure, cybersecurity).
• Experience with AI governance, model risk, data privacy, security, explainability, and oversight.
• Experience in AI governance or assurance reviews involving AI or Generative AI solutions.

Responsibilities

• Perform independent validation of key Technology controls across cybersecurity, IT operations, data governance, change management, outsourcing, and access control.
• Assess adherence to internal policies, standards, and regulatory requirements (MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
• Document validation findings and provide clear, actionable recommendations.
• Develop and implement continuous validation use cases to identify control gaps earlier and reduce manual testing.

Skills

Communication

Independent reviews

Stakeholder engagement

Detail-oriented

AI governance familiarity

Data analytics

Education

Bachelor's degree

CISA

CISM

CISSP

CRISC

Tools

Power BI

Tableau

QlikView

SQL

Python

Alteryx

Job description

Role Summary:

Reporting to the Validation Lead, the Line 1.5 assurance role provides independent, control-focused assurance within Technology. The role evaluates the design and operating effectiveness of controls across technology and processes. It partners closely with First Line control owners, leveraging data-driven and continuous assurance to identify control gaps earlier and strengthen regulatory control alignment.

Role Responsibilities:

Control Assurance and Testing

• Perform independent validation of key Technology controls, assessing design and operating effectiveness of controls related to areas such as cybersecurity, IT operations, data governance, change management, outsourcing, and access management.
• Assess adherence to internal policies, standards, and regulatory requirements (e.g., MAS TRM,MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
• Documentvalidation findings and providing clear, actional recommendations.
• Developand implement continuous validation use cases to provide more timely controlgap identification and reduce reliance on manual testing.

Regulatory Compliance

• Support the interpretation and implementation of regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).

Risk Governance, Reporting, and Stakeholder Engagement

• Prepare validation reports for Technology management and risk committees with clear risk articulation, prioritized recommendations, and target implementation dates.
• Engage constructively with stakeholders across Line 1, 2, and 3, promoting a strong risk and control culture.

Role Requirements:

• Bachelor’s Degree with 5 to 7 years of relevant experience within financial institutes in the areas of Technology Risk Management/ Audit/ Governance, and Data Analytics.
• Relevantprofessional certifications such as CISA, CISM, CISSP, CRISC or equivalent.
• Strongunderstanding of IT processes such as SDLC, change management, cloud,infrastructure operations, and cybersecurity.
• Understandingof AI and Generative AI concepts, associated risks, and governanceconsiderations, including model risk, data privacy, security, explainability,bias, accountability, and human oversight.
• Experienceparticipating in AI governance, technology risk, model risk management, orassurance reviews involving AI or Generative AI solutions.
• Familiarity with Singapore regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).

Preferred Skills:

• Good communication and writing skills, especially in summarizing risks and controls clearly for senior stakeholders.
• Ability to independently conduct reviews, perform control design assessment, process walkthroughs, evidence, and identify root causes.
• Ability to provide constructive challenges while maintaining a strong relationship with stakeholders and control owners.
• Independent, detail-oriented, and capable of managing multiple priorities.
• Familiarity with industry AI governance frameworks and regulatory guidance, such as MASFEAT Principles, NIST AI Risk Management Framework (AI RMF), or equivalent frameworks will be an advantage.
• Experience in applying data analytics and automation using BI Tools (such as Power BI, Tableau, QlikView), and Programming/ Scripting Languages (such as SQL, Python, Alteryx)to enhance control testing will be an advantage.