Technology Risk & Controls Analyst

IDC TECHNOLOGIES (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 85,000 - 120,000; Full time

Job summary

IDC TECHNOLOGIES (SINGAPORE) PTE. LTD. is seeking a seasoned professional to lead technology risk management and governance activities.

The role involves supporting risk reviews, risk assessments, control testing, and remediation tracking across technology platforms in a regulated financial services context. The ideal candidate has a minimum of 3 years of experience in technology risk domains, IT governance, and IT controls, with relevant certifications.

Qualifications

• Minimum 3 years of experience in technology risk management, IT governance, IT controls, cybersecurity governance, risk/compliance or related areas.
• Degree or equivalent in a relevant field; professional certification in risk domains is preferred.

Responsibilities

• Support risk reviews, risk assessments, and control effectiveness reviews across technology platforms.
• Analyze technology risks, emerging risks, and control gaps.
• Track remediation actions from incidents, audits, assessments, and regulatory reviews.
• Support RCSA activities and maintenance of risk registers.
• Assist in KRI monitoring, trend analysis, and management reporting.
• Conduct thematic reviews and root cause analysis of control deficiencies.
• Prepare risk dashboards, metrics, and executive reports.
• Review technology changes and associated risk controls.
• Analyze change failures, unauthorised changes, and change-related incidents.
• Track change governance metrics and trend reporting.
• Assist improvement initiatives for change and release management processes.
• Support cybersecurity governance activities and tracking of security risk remediation actions.

Skills

Technology Risk Management

IT Governance

IT Controls

Cybersecurity Governance

Technology Compliance

IT Audit

Operational Risk

Service Resilience

Technology Project Governance

Data analysis

Education

Bachelor's Degree in Computer Science/IT/Engineering/IS/Cybersecurity/Risk Management

Professional certification in technology risk domains

Tools

Excel

Power BI

SQL

Python

AI-enabled analytics tools

Job description

Roles & Responsibilities:

Technology Risk Management

• Support risk reviews, risk assessments, and control effectiveness reviews across technology platforms.
• Perform analysis of technology risks, emerging risks, and control gaps.
• Track remediation actions arising from incidents, audits, assessments, and regulatory reviews.
• Support RCSA activities and maintenance of risk registers.
• Assist in KRI monitoring, trend analysis, and preparation of management reporting.
• Conduct thematic reviews and root cause analysis of control deficiencies.
• Prepare risk dashboards, metrics, and executive reports.
• Support review of technology changes and associated risk controls.
• Perform analysis of change failures, unauthorised changes, and change-related incidents.
• Track change governance metrics and trend reporting.
• Assist in improvement initiatives relating to change and release management processes.
• Support cybersecurity governance activities and tracking of security risk remediation actions.

Education:

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, Risk Management, or equivalent.
• Professional certification in technology risk domains or equivalent

Mandatory :

• Minimum 3 years of experience in one or more of the following areas:
• Technology Risk Management
• IT Governance
• IT Controls
• Cybersecurity Governance
• Technology Compliance
• IT Audit
• Operational Risk
• Service Resilience
• Technology Project Governance

Preferred :

Experience in any of the following:

• Risk assessments and control testing
• Audit management
• RCSA execution
• KRI/KCI reporting
• Incident and problem management
• Regulatory compliance reviews
• Cloud governance and security controls
• Third-party risk management
• Technology project risk oversight

Experience within banking, financial services, fintech, regulated industries, or large-scale technology environments will be advantageous.

Technical Competencies :

Good understanding of:

• Technology risk management lifecycle
• Governance, Risk & Compliance (GRC) practices
• ITIL processes
• Cybersecurity principles
• Operational resilience concepts
• Regulatory and industry standards such as:
• MAS TRM Guidelines
• MAS Notice 644
• MAS Notice 655
• ISO 27001
• NIST
• COBIT

Knowledge of data analysis tools such as Excel, Power BI, SQL, Python, or AI-enabled analytics tools will be advantageous.
This role is for one of our project requirements