VP / AVP, IT Risk Management

Network For Electronic Transfers (S); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Network for Electronic Transfers (Singapore) Pte Ltd. is seeking an IT Risk professional to join the second line of defence, focusing on identifying, assessing and reporting IT risks across the organisation.

The role requires 7–10 years in IT risk within regulated financial services, with knowledge of IT operations, Internal/IT Audit and certifications such as ITIL, CISSP or CRISC; excellent written and verbal English skills are essential.

Qualifications

• 7–10 years in IT risk within a regulated financial sector
• Experience in IT operations, Internal/IT Audit
• Knowledge of MAS TRM Guidelines and Cyber Hygiene practices
• Strong written and verbal English communication
• Detail-oriented with ability to perform deep-dive investigations

Responsibilities

• Support the IT risk management framework implementation and operations
• Assist in risk identification, prioritisation, assessment, monitoring and reporting
• Monitor risk tolerances and key risk indicators
• Support IT risk-related projects and incident management
• Assist risk committee meetings and staff risk-awareness training

Skills

IT risk management

stakeholder management

communication skills

regulatory knowledge

problem solving

attention to detail

independent work

Tools

ITIL Certification

CISSP

CRISC

Job description

Select how often (in days) to receive an alert:

Company: Network For Electronic Transfers (S)

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.

The Group operates Singapore's national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Position Summary

This role, as a second line-of-defence, is required to work with first line-of-defence functions to identify, assess, monitor and report key IT risks. This role is also required to work closely with divisions/functions to understand and document controls and identify potential areas of improvement. Experience in IT and Cybersecurity Risk management is necessary, with good communication and written skills.

Key Responsibilities

• Support in the implementation and operation of the IT risk management framework, policies, processes, and procedures
• Assist in the identification, prioritisation, assessment, monitoring and reporting of key IT risksConduct risk and controls self-assessment (RCSA), operational loss event reporting, assess risk control adequacy and effectiveness
• Monitor and report risk tolerances and key risk indicators
• Support incident risk management and escalation, IT risk-related projects and/or initiatives
• Assist in the conduct of risk committee meetings, risk awareness training and workshop for staff
• Maintain a trusted and collaborative relationship with stakeholders, to promote risk awareness and resiliency

Requirements

• 7 to 10 years of experience in IT Risk including ITDR/Business Continuity and Resiliency; experience in a regulated financial industry
• Experience in IT operations, Internal/IT Audit and relevant risk certifications (e.g. ITIL, CISSP, CRISC) is an added advantage
• Knowledge of current regulatory requirements in Singapore and industry best practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, Cyber Security Code of Practice for Critical Information Infrastructure, FSM-N13, FSM-14)
• Good working knowledge of risk management and control concepts, constantly paying attention to details and ability to perform deep-dive investigation
• Good stakeholder management and collaboration skillsStrong and effective written and verbal communication skills in English is a must
• Highly motivated and has a strong desire to learn and succeedExcellent problem-solving skills, ability to prioritize, multi-task and handle tight deadlines
• Proactive team player with ability to work independently with minimal supervision

Network for Electronic Transfers (Singapore) Pte Ltd.