Technology Risk Manager, Risk & Prevention, Group Operations & Technology (VP)
OCBC
Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
OCBC Bank in Singapore seeks a VP for Group O&T Risk & Prevention to strengthen technology risk controls and regulatory compliance across regional teams. You will lead risk assessments, design automated monitoring, and collaborate with infrastructure and software engineering to embed risk-aware practices.
The role requires deep MAS guideline knowledge, strong communication, and the ability to drive cross-functional improvements in a fast-paced tech environment.
Qualifications
- Experience in IT risk and control assessments (including RCSA) and audits (internal/external).
- Strong regulatory knowledge including MAS guidelines and related acts.
- Keen in dashboards, data visualization, and heatmap presentations of metrics.
- Professional certifications such as CISSP, CISA, CRISC, CIPM, CIPP/A are advantageous.
- University degree in technology with 6+ years in audit/IT security/risk management.
Responsibilities
- Support Head, R&P – Technology Risk in risk and controls management for Group O&T.
- Collaborate with stakeholders to conduct infrastructure, applications, and operations risk assessments.
- Ensure compliance with bank standards, policies, and regulatory requirements.
- Lead outsourcing and business continuity risk assessments and controls.
- Drive automated risk assessment frameworks and dashboards for monitoring.
- Provide training on emerging risk automation to stakeholders.
Skills
Education
Tools
Job description
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career.
Your Opportunity Starts Here.
Group Operations and Technology (O&T) provides IT and backroom support across the bank's business lines such as Group Consumer Financial Services, Group Corporate Banking, Global Treasury, Group Risk Management, Group Finance, and Group Human Resources.
In addition, Group O&T runs the bank’s regional processing centres and technology operations, drive for productivity gains and lower unit costs by instilling a quality culture, and leverage on the synergy from cross border processing hubs in Singapore, Malaysia and across the region.
The objective of Group O&T Risk & Prevention (R&P) is to establish a risk awareness and compliance culture that helps Group O&T to manage risks. In supporting O&T departments, Group Risk and Regulatory Compliance Unit as the Division Compliance Officer, Business Continuity Management Coordinator and Ops Risk management Coordinator, R&P undertakes the following responsibilities:
- Coordinate and facilitate the implementation of Operational Risk & Compliance policies, methodologies, and initiatives for proactive risk management by Group O&T.
- Monitor and uplift the Division's risk and compliance management performance through tracking of audit issues, compliance breaches and loss events.
- Provide independent review of risk assessments performed by O&T for new/changed processes to ensure integration of risk management to internal processes.
- Manage the audit and regulatory engagement process, track, and ensure timely closure of issues.
- Promote awareness of risk among O&T staff and educate them on methodologies and processes for risk management and compliance.
The candidate is responsible to ensure that technology‑related risks are identified, assessed, and mitigated appropriately. This involves collaborating closely with the technology teams and regional R&P across the OCBC group to solve technology risk challenges and strengthen Group O&T’s risk culture.
- Support the Head, R&P – Technology Risk in the effective and proactive management of risk and controls for technology and outsourcing in Group O&T.
- Collaborate with stakeholders to:
- Perform infrastructure (operating systems, middleware, databases, network), applications, operations risk, and control assessments to ensure systems’ configurations, processes, and operations:
- Identify, assess, treat, mitigate, and articulate risks in both technical and business contexts.
- Ensure compliance with the bank’s standards, policies, and statutory and regulatory requirements.
- Conduct risk and control assessments related to outsourcing and business continuity management to ensure adequate controls and compliance.
- Challenge, drive, and discuss controls or risk mitigation solutions while building strong, respectful relationships.
- Support stakeholders in audits (internal/external) and regulatory reviews and inspections, ensuring tracking, reporting, and addressing root causes.
- Adaptability: Willingness to embrace change as the team continually adjusts strategies to meet evolving regulatory and control landscapes.
- Regulatory Knowledge: Strong understanding of regulatory requirements, including MAS Technology Risk Management, MAS Guidelines on Outsourcing, MAS Guidelines on Business Continuity Management, FSM‑N05, FSM‑N06, Notice 658, Cyber Security Act, Cybersecurity Code of Practice for CII, and Personal Data Protection Act.
- Risk and Control Assessment Experience: Proven experience in performing IT risk and control assessments (including RCSA) and managing audits (internal and external) as well as regulatory inspections.
- Dashboard and Data Visualization Skills: Experience in developing and implementing dashboards, data visualization, and heatmap presentations of metrics.
- DevOps, SRE, and Agile Methodologies: Good understanding and preferred experience with DevOps, Site Reliability Engineering (SRE), Agile methodologies, and CI/CD approaches and tools.
- Infrastructure Technology Expertise: Hands‑on experience in the following areas is desirable:
- Servers Platform
- Middleware technologies
- Microservices
- Virtualization
- Network
- Security
- Database
- University degree in technology with at least 6 years of experience in audit/ IT security/ risk management. Practitioner and holder of relevant certification, such as CISSP, CISA, CRISC, CIPM, CIPP/A & etc would be advantageous.
- Technology Risk Management Expertise: Strong background in technology risk management, with hands‑on experience in technology domains or audit/compliance.
- Statistical Modelling and Data Analysis: Prior experience in statistical modelling, data analysis, and data visualization tools is advantageous.
- Self‑Motivation and Initiative: Driven, self‑motivated individuals who demonstrate initiative and are results oriented.
- Forward‑Thinking: Interested in staying updated with developments and best practices in risk management, analytics, and automation.
- Analytical Skills: Hands‑on approach with good analytical skills and attention to detail.
- Communication and Collaboration: Excellent communication and collaboration skills.
- Adaptability: Strong ability to adapt and work effectively in a dynamic, fast‑paced environment.
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry‑leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
