Technology Governance Analyst |IT Operations, Security, Risk and Compliance audit

PageGroup Corporation Solutions (Malaysia) Sdn Bhd; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

PageGroup Corporation Solutions (Malaysia) Sdn Bhd is seeking an Internal Technology Governance Analyst in Singapore to strengthen IT risk, governance, compliance and audit functions within the Technology division. The role focuses on identifying, assessing, monitoring and mitigating technology risks while ensuring regulatory compliance.

The candidate will work with Technology, Security, Risk, Audit and Business stakeholders to drive governance initiatives and improve control effectiveness, with

Qualifications

• Strong analytical and risk assessment capabilities.
• Excellent stakeholder management and communication skills.
• Ability to work independently and handle multiple priorities.

Responsibilities

• IT Risk Management: conduct risk assessments and suggest mitigation actions.
• Compliance & Audit: support regulatory compliance initiatives and audits.
• Collaboration & Communication: raise risk governance awareness and train teams.
• Performance Monitoring & Reporting: track KRIs/KPIs and present governance reports.

Skills

Analytical skills

Stakeholder management

Communication skills

Report writing

Independent work

Prioritization

Education

Diploma or Degree in Computer Science/IT/Security

Tools

GRC platforms

Job description

Job De ion – Internal Technology Governance Analyst

Position Summary

We are seeking a proactive and detail-oriented Internal Technology Governance Analyst to strengthen IT Risk, Governance, Compliance, and Audit functions within the Technology division. The successful candidate will play a key role in identifying, assessing, monitoring, and mitigating technology risks while ensuring compliance with regulatory requirements and internal policies.

Key Responsibilities

IT Risk Management

• Conduct technology risk assessments and recommend appropriate risk mitigation strategies and action plans.
• Ensure visibility, timely escalation, and effective management of IT risks arising from technology services, projects, and day-to-day operations.
• Review risk issues logged in Governance, Risk & Compliance (GRC) tools and ensure timely remediation, risk assessment, and closure.
• Partner with the Second Line of Defense (Technology Risk) to perform periodic Control Self-Assessments (CSA).
• Identify emerging technology risks and evaluate their potential impact on business operations.
• Develop and implement effective risk mitigation and monitoring measures.

Compliance & Audit

• Ensure adherence to internal IT policies, standards, and external regulatory requirements.
• Support regulatory compliance initiatives and technology governance programs.
• Coordinate internal and external IT audits and manage responses to audit findings and recommendations.
• Track audit actions to ensure timely resolution and closure.

Collaboration & Communication

• Facilitate IT risk governance awareness and training programs across the organization.
• Promote a strong risk-aware culture within the Technology division.
• Work closely with Technology, Security, Risk, Audit, and Business stakeholders to drive governance initiatives and improve control effectiveness.

Performance Monitoring & Reporting

• Monitor and report Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
• Prepare and present technology governance and risk reports for management and Risk Committees.
• Highlight, articulate, and elevate significant technology risks to senior management and relevant stakeholders.
• Provide insights and recommendations to strengthen governance, risk, and compliance practices.

Requirements

Qualifications

• Diploma or Degree in Computer Science, Information Technology, Information Security, or a related discipline.

Experience

• 3 to 5 years of experience in Technology Risk, IT Governance, IT Compliance, Information Security, IT Audit, or Operational Risk Management.
• Hands-on experience in monitoring IT operations, technology controls, security risks, compliance frameworks, and audit activities.
• Experience with Governance, Risk & Compliance (GRC) platforms and risk management processes.

Technical Knowledge

• Good understanding of IT risk management frameworks, governance practices, and control environments.
• Familiarity with Monetary Authority of Singapore (MAS) technology risk regulations, including MAS Notices, Guidelines, Advisories, and PDPA requirements.
• Knowledge of technology governance, cybersecurity controls, operational risk management, and audit methodologies.

Preferred Certifications

Candidates with the following certifications will have an advantage:

• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CISSP (Certified Information Systems Security Professional)
• CRISC (Certified in Risk and Information Systems Control)
• ITIL Foundation or higher

Key Competencies

• Strong analytical and risk assessment skills.
• Excellent stakeholder management and communication abilities.
• Ability to work independently and manage multiple priorities.
• Strong report writing and presentation skills.
• Attention to detail and problem-solving mindset.
• Knowledge of regulatory and compliance requirements within the financial services industry.