Technology Governance Analyst

ESPIRE INFOLABS (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

ESPIRE INFOLABS (SINGAPORE) PTE. LTD. is seeking a seasoned IT Risk professional to lead risk assessments, governance, and compliance initiatives within the Technology division.

The role focuses on identifying and mitigating IT risks across operations and technology services, while ensuring alignment with risk management plans and MAS regulatory expectations. The candidate will coordinate IT audits, support risk governance training, and collaborate with the Second Line of Defense to drive

Qualifications

• Min Diploma or Degree in Computer Science or Information Technology.
• At least 5 years in Technology Risk, IT Operations, Security, Risk and Compliance or audit.
• Familiarity with MAS regulatory requirements and related notices/guidelines.
• Industry certifications such as CISA, CISM, CISSP or CRISC are a plus; ITIL knowledge is beneficial.

Responsibilities

• Conduct risk assessments and propose/implement risk management plans.
• Ensure visibility, escalation and management of IT risks in service delivery and operations.
• Review risk issues in the GRC tool and manage lapse and risk assessments timely.
• Collaborate with Second Line of Defense (Tech Risk) for control self-assessment exercises.
• Identify emerging risks, conduct risk assessments and implement mitigation strategies.
• Coordinate IT audits and manage responses to audit findings.
• Promote IT risk governance training and awareness across the organization.
• Monitor KPIs and KRIs and report IT governance performance to Risk Committees.

Skills

Risk management

Risk assessment

Governance

Communication

Education

Diploma/Degree in CS or IT

Tools

GRC tools

Job description

IT Risk Management

• Conduct risk assessments and propose/ implement risk management plans.
• Ensure visibility, escalation, and management of IT risks inherent in the delivery of technology services and day to day operations
• Review risk issues that are lodged in GRC tool timely and lapses are managed and risk assessed
• Collaborate with the Second Line of Defense (Tech Risk) to conduct periodic control self-assessment exercises.
• Identify emerging risks, conduct thorough risk assessments, and implement effective mitigation strategies.

Compliance and Audit

• Ensure compliance with IT policies and standards and regulations
• Coordinate IT audits and manage responses to audit findings

Collaboration and Communication:

• Facilitate IT Risk governance training and awareness programs for employees
• Promote a strong IT risk culture across the Technology division

Performance Monitoring and Reporting:

• Monitor key performance indicators and key risk indicators
• Report on IT governance performance to stakeholders in Risk Committees
• Highlighting and articulating inherent risks to senior management

Experiences

• Diploma or Degree in Computer Science or Information Technology.
• 5 years of experience in Technology Risk i.e. monitoring of IT Operations, Security, Risk and Compliance or audit.
• Familiar with MAS regulatory requirements including Technology related MAS notices, guidelines, advisories, PDPA
• Industry certifications like CISA, CISM, CISSP, CRISC and ITIL will be beneficial