Technology risk & operations analyst

QUESSCORP SINGAPORE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading technology firm in Singapore is seeking an experienced professional to oversee operational reporting, audit management, and technology governance. The role requires 8–12 years of experience in technology operations, strong expertise in Power BI, and excellent stakeholder management skills. You will be responsible for preparing management reports, delivering actionable insights, and coordinating vendor management while ensuring compliance with audit requirements. A bachelor's degree in a related field is essential. The company values data privacy and security in its hiring process.

Qualifications

• 8–12 years of experience in technology operations, governance, risk, or PMO roles.
• Strong ability to interpret complex data and present insights clearly to senior leadership.
• Hands-on experience with audit readiness and evidence management.

Responsibilities

• Prepare project status reports and dashboards.
• Deliver ad hoc reports to support leadership decisions.
• Manage internal and external audits.
• Oversee vulnerability management and technology governance.
• Coordinate vendor management and technology asset lifecycle.

Skills

Operational Reporting

Risk & Controls

Audit Readiness

Process Governance

Vendor & Asset Management

Stakeholder Management

Power BI

Advanced Excel

Jira

SharePoint/Confluence

Education

Bachelor's degree in Computer Science

Tools

Power BI

Advanced Excel

Jira

SharePoint/Confluence

Job description

Key Responsibilities

Operational Support & Reporting

• Prepare comprehensive project status reports, management reports, and dashboards covering projects, operations, risk, and vendor management.

• Deliver ad hoc and time-sensitive reports to support leadership decisions, audits, and regulatory needs with clear, actionable insights.

• Track and analyze operational metrics including SLAs, incident and defect trends, lifecycle KPIs, and service performance.

• Maintain reporting cadences, data quality standards, and automate recurring reports where feasible.

• Support process standardization and governance across technology operations, including SOPs, templates, and documentation.

Audit & Risk Management

• Manage internal and external audits, including GRC updates, RFIs, and audit observations.

• Provide risk oversight and governance across technology domains.

• Lead audit readiness activities, including:

  • Evidence collection and management

  • Stakeholder coordination

  • Remediation tracking and closure

• Monitor and track risks, issues, and findings from incidents, breaches, inspections, and reviews; ensure timely escalation and resolution.

• Maintain knowledge artifacts such as playbooks, control catalogs, FAQs, and micro-learning materials.

Digital Workplace & Vendor Management

• Oversee TPRA, vendor management, BCM, annual KRCSA, and risk reduction initiatives.

• Manage the technology asset lifecycle (hardware, software, licenses), including refresh planning, obsolescence tracking, and decommissioning.

• Coordinate procurement and vendor enablement, including intake, sourcing, onboarding, renewals, and compliance.

• Partner with Vendor Management to track vendor performance, SLAs, contract obligations, and third-party risk assessments.

Technology Governance & Vulnerability Management

• Oversee vulnerability management, remediation tracking, and ISRA renewals.

• Liaise with application domains on ORSA submissions, including scope, budgeting, and delivery timelines.

• Act as liaison for the Technology Obsolescence Task Force, providing governance and reporting.

• Manage RTB Capex projects, including budget tracking, approvals, memo preparation, and escalation handling.

Key Deliverables

• Executive management reports and dashboards (including ad hoc requests).

• Operational reporting with clear, actionable insights.

• Govern dashboards and risk reduction plans.

• Audit and compliance evidence, including remediation tracking and certification renewals.

• Security assessment reports and vulnerability test results.

• Lifecycle and obsolescence compliance validation.

• Procurement documentation and vendor performance tracking.

Core Skills & Competencies

• Operational Reporting: KPI design, dashboarding, data storytelling, data quality management.

• Risk & Controls: Risk assessments, control design and effectiveness testing, issue management.

• Audit Readiness: Evidence management, walkthroughs, remediation coordination.

• Process Governance: SOP development, standardization, continuous improvement.

• Vendor & Asset Management: Lifecycle planning, procurement coordination, third-party risk awareness.

• Stakeholder Management: Cross-functional coordination, facilitation, and conflict resolution.

• Tools: Power BI, Advanced Excel, Jira, SharePoint/Confluence.

Experience & Qualifications

Education

• Bachelor’s degree in Computer Science, IT, Information Systems, Cybersecurity, Engineering, or related discipline.

• Preferred Certifications: CISA, CISM, CISSP, or equivalent.

Experience

• 8–12 years of experience in technology operations, governance, risk, or PMO roles, preferably within banking or large enterprise environments.

Essential Experience Areas

1. Operational Reporting & Data Analysis

• 3–5 years of experience producing management reports, dashboards, and KPIs.

• Strong ability to interpret complex data and present insights clearly to senior leadership.

• Proven experience delivering ad hoc reporting under tight timelines.

2. Risk & Audit Management

• Hands‑on experience with audit readiness, evidence management, and remediation tracking.

• Familiarity with risk frameworks, GRC tools, and regulatory requirements.

• CISSP or CISA certification preferred.

3. Vendor & Procurement Management

• Experience with vendor lifecycle management, onboarding, renewals, and performance tracking.

• Knowledge of procurement processes, contract compliance, and TPRA.

4. Technology Lifecycle & Governance

• Understanding of asset lifecycle management, refresh planning, and obsolescence tracking.

• Experience supporting vulnerability management and compliance validation.

5. Tools & Technical Skills

• Proficiency in Power BI, advanced Excel (pivot tables, macros), Jira, SharePoint/Confluence.

• Ability to automate recurring reports and maintain high data quality standards.

6. Stakeholder Management

• Strong experience managing cross‑functional stakeholders and competing priorities.

• Excellent communication and presentation skills for senior leadership.

Key Domain / Technical Skills (Top 3)

• Power BI, Advanced Excel, Jira, SharePoint/Confluence

• Automated reporting and data quality management

• Risk, audit, and governance expertise (CISA/CISSP preferred)

The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected will be used solely for the purpose of evaluating your qualifications for the position you are applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us.

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance, and skills upgrading, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation‑wide manpower and skills upgrading initiatives. By applying for this role, you consent to Quesscorp Singapore’s PDPA and e2i’s PDPA.