VP/ED, Cyber Risk Management

OCBC Bank; Singapore; On-site; SGD 350,000 - 520,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits package

Community initiatives

Industry-leading learning & dev

Job summary

OCBC Bank is seeking an Executive Director of Group Information Security & Digital Risk Management (ISDRM) to lead the group’s cyber risk and digital security strategy. You will drive independent oversight, advise on banking products and digital channels, and collaborate with senior management to strengthen resilience.

The role requires 15+ years in technology risk and security within financial services, deep expertise in risk governance, regulatory requirements, and strong communication with

Qualifications

• Stay up-to-date with the latest security threats and trends.
• Collaborate with stakeholders across the bank to ensure effective security policies.
• Proven leadership in risk advisory and driving risk reduction initiatives.

Responsibilities

• Provide independent oversight and challenge on enterprise cyber security capabilities and resilience.
• Provide risk advisory and approval on digital risks from banking products and channels.
• Oversee due diligence reviews for third-party service arrangements.
• Assess risks related to digital assets, AI, cloud adoption, and emerging tech.
• Support development of information security policies, standards, governance frameworks.
• Represent Group ISDRM at risk forums and governance committees with senior leaders.

Skills

Information security

Cyber risk management

Regulatory knowledge

Leadership

Stakeholder management

Risk advisory

Education

Degree in Computer Science, Cybersecurity, Information Security, or related discipline

Tools

CRISC

CISSP

CCSP

GIAC

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join Protecting our customers' assets and information is at the heart of what we do at OCBC.

As an Information Security & Digital Risk Management Specialist, you'll play a critical role in safeguarding our digital landscape and ensuring the integrity of our systems. You'll be part of a team that's passionate about staying ahead of emerging threats and risks.

How you succeed

To succeed in this role, you'll need to stay up-to-date with the latest security threats and trends. You'll work closely with our technology teams to identify and mitigate risks, and develop strategies to protect our digital assets. You'll also need to collaborate with stakeholders across the bank to ensure that our security policies and procedures are effective and aligned with our business goals.

What you do

As an Executive Director of Group Information Security & Digital Risk Management (ISDRM), you will be responsible for driving the Group's digital and cyber risk management agenda through independent oversight, challenge and advisory on banking products, digital channels, digital assets, artificial intelligence, third-party service arrangements, and enterprise cyber security capabilities across the OCBC Group. The role requires close engagement with senior management, business and technology stakeholders, and risk management committees to strengthen the Group's cyber resilience, safeguard the security and integrity of OCBC Group's digital offerings, enable secure digital innovation, and ensure compliance with regulatory requirements and industry best practices.

Key Responsibilities

• Provide independent oversight and challenge on the design and effectiveness of enterprise cyber security capabilities, controls, and cyber resilience initiatives.
• Provide risk advisory and approval on digital risks arising from banking products and digital channels.
• Oversee due diligence reviews and risk assessments relating to third-party service arrangements and service providers.
• Assess and advise on risks associated with digital assets, artificial intelligence, cloud adoption, and emerging technologies.
• Support the development and enhancement of information security and digital risk policies, standards, and governance frameworks.
• Represent Group ISDRM at risk forums and governance committees, to provide thought leadership on emerging digital and cyber risk trends.

Who you are

Degree in Computer Science, Cybersecurity, Information Security, or related discipline.

Over 15 years of experience in technology risk management, information security, and cyber security, with significant experience in the financial services industry.

Proven expertise in secure application architecture, information security and cyber security.

Strong knowledge of technology and cyber risk management frameworks, standards, and regulatory requirements, including MAS Technology Risk Management Guidelines, NIST and related industry standards.

Proven track record in leading risk advisory, influencing risk management outcomes and driving risk reduction initiatives.

Experience engaging senior management, regulators and senior business and technology stakeholders.

Strong analytical, strategic thinking and problem-solving skills, with the ability to operate effectively in a complex and dynamic environment.

Excellent communication and stakeholder management skills, with the ability to influence across business, technology, and control functions.

Relevant professional certifications (e.g., CRISC, CISSP, CCSP, GIAC or equivalent) will be advantageous.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.

Equal opportunity. Fair employment. Selection based on ability and fit with our culture and values.

Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

Additional Company Information

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.