Third-Party Technology Risk Analyst (6-Month Contract)

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 78,000 - 100,000; Full time

Job summary

NTT SINGAPORE PTE. LTD. is seeking a Technology Risk Analyst to assess third-party service providers, outsourcing arrangements and related controls. This six-month contract role is based in Changi and involves extensive due diligence, documentation and stakeholder engagement.

The ideal candidate has experience in technology risk, IT audit or information security reviews, with familiarity in ISO 27001, NIST, SOC 1/2 and MAS expectations.

Qualifications

• Diploma or degree in Information Technology, Cybersecurity, Information Systems, Risk Management or related discipline.
• Experience in third-party risk management, vendor due diligence, technology risk or information security reviews.
• Knowledge of IT general controls, access management, change management, vulnerability management, incident management and business continuity.
• Familiarity with ISO 27001, NIST, COBIT, SOC 1 or SOC 2 and MAS expectations is advantageous.

Responsibilities

• Conduct due diligence and technology-risk assessments of third-party service providers and outsourcing arrangements.
• Assess information security, cybersecurity, cloud, technology, operational and compliance risks.
• Review vendor questionnaires, policies, certifications, audit reports and supporting control evidence.
• Evaluate the design and effectiveness of security and technology controls.
• Identify control gaps, risk exposures and areas of non-compliance.
• Document assessment findings, risk ratings and practical remediation recommendations.
• Engage vendors, stakeholders and control owners to clarify findings and obtain evidence.
• Track identified risks, remediation actions and documentation to closure.
• Prepare clear assessment reports and management updates.
• Support MAS regulatory expectations through adherence to internal policies and control frameworks.

Skills

Technology risk

Vendor due diligence

Cybersecurity risk

IT audit

InfoSec reviews

Stakeholder management

Analytical skills

Documentation

Regulatory awareness

Education

Diploma or degree in IT/Cybersecurity/IS/Risk Mgmt

Job description

NTT SINGAPORE PTE. LTD. is seeking a Technology Risk Analyst to assess third-party service providers, outsourcing arrangements and related controls. This six-month contract role is based in Changi and involves extensive due diligence, documentation and stakeholder engagement.

The ideal candidate has experience in technology risk, IT audit or information security reviews, with familiarity in ISO 27001, NIST, SOC 1/2 and MAS expectations.