Technology Risk Manager – AI & Third-Party Risk

Eames Consulting Group; Singapore; On-site; SGD 120,000 - 200,000; Full time

Job summary

Eames Consulting Group is seeking an experienced risk professional to strengthen its technology risk oversight function within a global investment firm. You will provide independent oversight and challenge across technology, third-party and AI supply chain risks.

Responsibilities include evaluating vendor governance, assessing AI-related risks, and delivering risk assessments and remediation strategies across IT and cybersecurity domains.

Qualifications

• At least 8 years of experience in technology risk, IT audit, risk assurance or a related control function, ideally within financial services or a highly regulated industry.
• Strong track record in third-party risk oversight, vendor assessments, outsourcing governance and technology control reviews.
• Solid knowledge of IT risk frameworks, cybersecurity controls, operational resilience and risk assessment methodologies.
• Understanding of AI/ML technologies and the associated risks relating to external models, data provenance, AI infrastructure and supply chain security.
• Familiarity with MAS technology and outsourcing requirements, NIST AI RMF and ISO standards.
• Excellent stakeholder engagement and communication skills, with the confidence to challenge risk decisions, influence senior stakeholders.

Responsibilities

• Evaluate third-party technology risk exposures, including vendor governance, outsourcing arrangements, cloud services and the effectiveness of security and resilience controls.
• Assess risks associated with external AI solutions, including model providers, data sources, AI platforms and open-source technologies, with emphasis on security, data integrity and responsible usage.
• Provide independent review and constructive challenge of technology risk assessments, control gaps and remediation strategies across key IT and cybersecurity domains.
• Identify emerging supply chain vulnerabilities, vendor concentration exposures and subcontractor risks, translating findings into meaningful risk indicators and management reporting.
• Lead targeted risk assessments and thematic reviews, oversee significant technology-related incidents, and contribute to the continuous enhancement of risk governance practices.

Skills

Technology risk

IT audit

Vendor oversight

Third-party risk

Regulatory compliance

AI/ML risk

Cybersecurity controls

Risk assessment

Stakeholder engagement

Job description

An established global investment firm is seeking an experienced risk professional to strengthen its technology risk oversight function. This role providing independent oversight and challenge across technology, third-party and AI supply chain risks.

Key Responsibilities

• Evaluate third-party technology risk exposures, including vendor governance, outsourcing arrangements, cloud services and the effectiveness of security and resilience controls.
• Assess risks associated with external AI solutions, including model providers, data sources, AI platforms and open-source technologies, with emphasis on security, data integrity and responsible usage.
• Provide independent review and constructive challenge of technology risk assessments, control gaps and remediation strategies across key IT and cybersecurity domains.
• Identify emerging supply chain vulnerabilities, vendor concentration exposures and subcontractor risks, translating findings into meaningful risk indicators and management reporting.
• Lead targeted risk assessments and thematic reviews, oversee significant technology-related incidents, and contribute to the continuous enhancement of risk governance practices.

Requirements

• At least 8 years of experience in technology risk, IT audit, risk assurance or a related control function, ideally within financial services or a highly regulated industry.
• Strong track record in third-party risk oversight, vendor assessments, outsourcing governance and technology control reviews.
• Solid knowledge of IT risk frameworks, cybersecurity controls, operational resilience and risk assessment methodologies.
• Understanding of AI/ML technologies and the associated risks relating to external models, data provenance, AI infrastructure and supply chain security.
• Familiarity with relevant regulatory guidelines and industry standards, including MAS technology and outsourcing requirements, NIST AI RMF and ISO standards.
• Excellent stakeholder engagement and communication skills, with the confidence to challenge risk decisions, influence senior stakeholders and work across business and technology teams.