Technology Risk & Third-Party Security Specialist

RiDiK (a Subsidiary of CLPS. Nasdaq: CLPS); Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

RiDiK (a Subsidiary of CLPS. Nasdaq: CLPS) seeks an experienced Technology Risk & Third-Party Security Assessment Specialist to support security reviews of external vendors and outsourcing arrangements in Singapore.

You will conduct due diligence, assess information security, technology, and compliance risks, identify gaps, and provide actionable remediation recommendations, collaborating with business, technology, security, and vendor stakeholders.

Qualifications

• 5+ years of experience in Technology Risk, Cybersecurity, IT Audit, Information Security, or Vendor Risk Management.
• Strong understanding of third-party risk management and vendor due diligence processes.
• Knowledge of cybersecurity controls, cloud security, and outsourcing risk management.
• Familiarity with MAS Technology Risk Management (TRM) and Outsourcing Guidelines is preferred.
• Excellent analytical, report-writing, and stakeholder management skills.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Responsibilities

• Perform third-party and outsourcing risk assessments.
• Review vendor security controls, policies, certifications, and audit reports.
• Assess information security, technology, compliance, and cloud-related risks.
• Identify control gaps and recommend remediation actions.
• Prepare risk assessment reports and document findings.
• Collaborate with business, technology, security, compliance, and vendor stakeholders.

Skills

Vendor risk management

Cybersecurity

Risk assessment

Stakeholder management

Reporting

Job description

RiDiK (a Subsidiary of CLPS. Nasdaq: CLPS) seeks an experienced Technology Risk & Third-Party Security Assessment Specialist to support security reviews of external vendors and outsourcing arrangements in Singapore.

You will conduct due diligence, assess information security, technology, and compliance risks, identify gaps, and provide actionable remediation recommendations, collaborating with business, technology, security, and vendor stakeholders.