Technology Risk & Control Analyst

AVENSYS CONSULTING PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Avensys Consulting Pte. Ltd. in Singapore seeks a Technology Risk & Control Analyst to support risk reviews, assess technology risks, and track control effectiveness across platforms.

The role involves contributing to risk dashboards, incident remediation tracking, and regulatory compliance for banking, financial services, and technology environments. Ideal candidates hold a Bachelor's degree in a relevant field and have 3+ years of experience in risk management, IT governance, IT controls, or

Qualifications

• Minimum 3 years of experience in Technology Risk Management, IT Governance, IT Controls or related areas.
• Bachelor's degree in a relevant field is required; professional certification is preferred.
• Experience in risk reviews, control effectiveness reviews, and regulatory compliance is desirable.

Responsibilities

• Support risk reviews, risk assessments, and control effectiveness reviews across technology platforms.
• Analyze technology risks, emerging risks, and control gaps.
• Track remediation actions from incidents, audits and regulatory reviews.
• Support RCSA activities and maintenance of risk registers.
• Assist in KRI monitoring, trend analysis, and management reporting.
• Conduct root cause analysis of control deficiencies and prepare dashboards.

Skills

Risk analysis

Governance

Cybersecurity

Data analysis

Regulatory compliance

Education

Bachelor's degree in CS/IT/Engineering/IS/Cybersecurity/Risk Mgmt

Professional certification in technology risk domains

Tools

Excel

Power BI

SQL

Python

AI analytics tools

Job description

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Technology Risk & Control Analyst.

This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job Description

Roles & Responsibilities

• Support risk reviews, risk assessments, and control effectiveness reviews across technology platforms.
• Perform analysis of technology risks, emerging risks, and control gaps.
• Track remediation actions arising from incidents, audits, assessments, and regulatory reviews.
• Support RCSA activities and maintenance of risk registers.
• Assist in KRI monitoring, trend analysis, and preparation of management reporting.
• Conduct thematic reviews and root cause analysis of control deficiencies.
• Prepare risk dashboards, metrics, and executive reports.
• Support review of technology changes and associated risk controls.
• Perform analysis of change failures, unauthorised changes, and change-related incidents.
• Track change governance metrics and trend reporting.
• Assist in improvement initiatives relating to change and release management processes.
• Support cybersecurity governance activities and tracking of security risk remediation actions.

Education

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, Risk Management, or equivalent.
• Professional certification in technology risk domains or equivalent

Mandatory

Minimum 3 years of experience in one or more of the following areas:

• Technology Risk Management
• IT Governance
• IT Controls
• Cybersecurity Governance
• Technology Compliance
• IT Audit
• Operational Risk
• Service Resilience
• Technology Project Governance

Preferred

Experience in any of the following:

• Risk assessments and control testing
• Audit management
• RCSA execution
• KRI/KCI reporting
• Incident and problem management
• Regulatory compliance reviews
• Cloud governance and security controls
• Third-party risk management
• Technology project risk oversight

Experience within banking, financial services, fintech, regulated industries, or large-scale technology environments will be advantageous.

Technical Competencies

Good understanding of:

• Technology risk management lifecycle
• Governance, Risk & Compliance (GRC) practices
• ITIL processes
• Cybersecurity principles
• Operational resilience concepts

Regulatory and industry standards such as:

• MAS TRM Guidelines
• MAS Notice 644
• MAS Notice 655
• ISO 27001
• NIST
• COBIT

Knowledge of data analysis tools such as Excel, Power BI, SQL, Python, or AI-enabled analytics tools will be advantageous.