Technology Risk Manager, Risk & Prevention, Group Operations & Technology (AVP/VP)

OCBC company; Singapore; On-site; SGD 90,000 - 120,000; Full time

Benefits offered by this job

Holistic flexible benefits

Community initiatives

Professional development opportunities

Job summary

OCBC company in Singapore is looking for a Technology Risk Manager to oversee technology-related risks, ensuring compliance with regulatory requirements while collaborating with various stakeholders.

The ideal candidate will have at least 6 years of experience in risk management, strong knowledge of regulatory standards, and hands-on expertise in IT risk assessment. A competitive salary and a suite of flexible benefits will be offered to the successful candidate.

Qualifications

• At least 6 years of experience in audit/IT security/risk management.
• Hands-on experience in performing IT risk and control assessments.
• Strong understanding of MAS regulatory requirements.

Responsibilities

• Support risk management of technology and outsourcing.
• Conduct risk assessments for IT systems and compliance.
• Provide training on emerging trends in risk automation.

Skills

Adaptability

Regulatory Knowledge

Risk and Control Assessment Experience

Dashboard and Data Visualization Skills

DevOps, SRE, and Agile Methodologies

Infrastructure Technology Expertise

Education

University degree in technology

Tools

CISSP

CISA

CRISC

CIPM

CIPP/A

Job description

Technology Risk Manager, Risk & Prevention, Group Operations & Technology (AVP/VP)Skip to main contentYou may choose to display a cookie banner on the external site. You must specify the message in the cookie banner and may add a link to a relevant policy. If you are unfamiliar with these requirements, please seek the advice of legal counsel.You are about to enter websites controlled or offered by third parties. OCBC hereby disclaims liability for any information, materials, products or services posted or offered at any of these third party web-sites. By creating a link to these third party web-sites, OCBC does not endorse or recommend any products or services offered or information contained on those web-sites or information fed by these third parties nor is OCBC liable for any failure of products or services offered or advertised at any of these third party web-sites. OCBC Group shall in no event be liable for any damages, loss or expense including without limitation, direct, indirect, special, or consequential damage, or economic loss arising from or in connection with any use of or access to any other website linked to this website, any system, server or connection failure, error, omission, interruption, delay in transmission, or computer virus and any services, products, information, data, software or other material obtained from this website or from any other website linked to this website. Any hyperlinks to any other websites are not an endorsement or verification of such websites and such websites should only be accessed at the user’s own risks. This exclusion clause shall take effect to the fullest extent permitted by law.You further consent to Oversea-Chinese Banking Corporation Limited, its related corporations (collectively, the "OCBC Group"), and their respective business partners and agents (collectively, the “OCBC Representatives”) collecting, using and disclosing your personal data for purposes reasonably required by the OCBC Group and the OCBC Representatives to enable them to process your employment application and assess your suitability for the position which you are applying for. Such purposes are set out in a Data Protection Policy, which is accessible at www.ocbc.com/policies or available on request and which you confirm you have read and understood.# CareersTechnology Risk Manager, Risk & Prevention, Group Operations & Technology (AVP/VP) page is loaded## Technology Risk Manager, Risk & Prevention, Group Operations & Technology (AVP/VP)Applyremote type: Onsitelocations: OCBC Singaporetime type: Full timeposted on: Posted Todayjob requisition id: JR00008623# **WHO WE ARE:**As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.Your Opportunity Starts Here.# **Technology Risk Manager, Risk & Prevention, Group Operations & Technology (AVP/VP)** Why Join As a Risk Manager in Risk & Prevention at OCBC, you'll play a critical role in ensuring the bank's operations are efficient, effective, and compliant with regulatory requirements. You'll have the opportunity to make a meaningful impact on the bank's risk management framework and contribute to its long-term success. How you succeed The candidate is responsible to ensure that technology-related risks are identified, assessed, and mitigated appropriately. This involves collaborating closely with the technology teams and regional R&P across the OCBC group to solve technology risk challenges and strengthen Group O&T’s risk culture.What you do* **Support the Head, R&P – Technology Risk** in the effective and proactive management of risk and controls for technology and outsourcing in Group O&T. **Collaborate with stakeholders** to:* Perform infrastructure (operating systems, middleware, databases, network), applications, operations risk, and control assessments to ensure systems’ configurations, processes, and operations: + Identify, assess, treat, mitigate, and articulate risks in both technical and business contexts. + Ensure compliance with the bank’s standards, policies, and statutory and regulatory requirements.* Conduct risk and control assessments related to outsourcing and business continuity management to ensure adequate controls and compliance.* Challenge, drive, and discuss controls or risk mitigation solutions while building strong, respectful relationships.* Support stakeholders in audits (internal/external) and regulatory reviews and inspections, ensuring tracking, reporting, and addressing root causes.* **Collaborate with O&T teams** across entities locally and regionally to assess risk profiles, identify potential lapses or non-compliance, and develop risk mitigation strategies for sustained controls.* **Provide advice, objective review, and challenge** to risk issues/process changes identified by stakeholders to ensure technology-related operational risks are adequately assessed and appropriate controls are in place.* **Drive the development and implementation** of automated risk assessment frameworks that identify and quantify potential risks.* **Design and implement automated risk monitoring and reporting** systems that provide alerts and dashboards to aid management and stakeholders in making informed decisions.* **Develop and deliver training programs** to educate stakeholders on emerging trends in risk automation.Who you are**Adaptability**: Willingness to embrace change as the team continually adjusts strategies to meet evolving regulatory and control landscapes.**Regulatory Knowledge**: Strong understanding of regulatory requirements, including MAS Technology Risk Management, MAS Guidelines on Outsourcing, MAS Guidelines on Business Continuity Management, FSM-N05, FSM-N06, Notice 658, Cyber Security Act, Cybersecurity Code of Practice for CII, and Personal Data Protection Act.**Risk and Control Assessment Experience**: Proven experience in performing IT risk and control assessments (including RCSA) and managing audits (internal and external) as well as regulatory inspections.**Dashboard and Data Visualization Skills**: Experience in developing and implementing dashboards, data visualization, and heatmap presentations of metrics.**DevOps, SRE, and Agile Methodologies**: Good understanding and preferred experience with DevOps, Site Reliability Engineering (SRE), Agile methodologies, and CI/CD approaches and tools.**Infrastructure Technology Expertise**: Hands-on experience in the following areas is desirable:* Servers Platform* Middleware technologies* Microservices* Virtualization* Network* Security* DatabaseAcademic: * University degree in technology with at least 6 years of experience in audit/ IT security/ risk management. Practitioner and holder of relevant certification, such as CISSP, CISA, CRISC, CIPM, CIPP/A & etc would be advantageous.Core Competencies * **Technology Risk Management Expertise**: Strong background in technology risk management, with hands-on experience in technology domains or audit/compliance.* **Statistical Modelling and Data Analysis**: Prior experience in statistical modelling, data analysis, and data visualization tools is advantageous.* **Self-Motivation and Initiative**: Driven, self-motivated individuals who demonstrate initiative and are results-oriented.* **Forward-Thinking**: Interested in staying updated with developments and best practices in risk management, analytics, and automation.* **Analytical Skills**: Hands-on approach with good analytical skills and attention to detail.* **Communication and Collaboration**: Excellent communication and collaboration skills.* **Adaptability**: Strong ability to adapt and work effectively in a dynamic, fast-paced environment.# # # **What we offer:**Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.