VP, Group Enterprise Risk

ADDX; Singapore; On-site; SGD 240,000 - 320,000; Full time

Job summary

ADDX is seeking a VP/SVP, Group Enterprise Risk to lead the group’s risk governance and second-line oversight across MAS-regulated and regional entities. The role drives risk appetite, policy governance, and independent challenge of new products, outsourcing, and operations.

You will report to senior management on top risks, oversee BCM, incident response, and regulatory engagement, and collaborate with technology risk teams to ensure robust resilience across the group.

Qualifications

• 8–10 years of experience in risk in financial services; fintech experience advantageous.
• Hands-on MAS outsourcing guidance and intragroup risk management experience.
• Familiar with MAS Technology Risk Management Guidelines.
• Proven ability to present to senior stakeholders and manage MAS inspections.
• Strong stakeholder management, communication and influencing skills.
• Creativity and appetite for continuous improvement.
• Experience building or scaling a risk function in a growth-stage company.

Responsibilities

• Own risk governance framework, risk taxonomy, policy suite and risk appetite.
• Translate risk appetite into KRIs, limits and tolerances across entities.
• Oversee enterprise risk, outsourcing/TPRM, BCM and credit risk policies.
• Manage the RCSA program ensuring validation and challenge from 1st line.
• Oversee outsourcing framework end-to-end, including intra-group arrangements.
• Report top risks and breaches to Senior Management; escalate where needed.
• Lead incident and loss-event processes with root-cause analysis and remediation.
• Coordinate with Technology on disaster recovery and cyber risk matters.
• Interface with MAS inspections; manage remediation actions and regulatory responses.

Skills

Experience 8-10 years

MAS outsourcing guidelines

MAS Technology Risk Management

Stakeholder management

Communication skills

Influencing skills

Continuous improvement

Building risk function

Job description

The ICHX Tech group operates regulated and non-regulated businesses across Singapore and the region. These include ADDX Pte Ltd, which is licensed by the Monetary Authority of Singapore (MAS) as a Recognised Market Operator and Capital Markets Services licensee and gives accredited investors access to private markets and alternatives.

The VP/SVP, Group Enterprise Risk is the senior second-line risk leader for every group entity. The role is responsible for:

1. Risk Governance – Developing, maintaining, and overseeing the Group's risk management framework and risk appetite.

2. Independent Risk Oversight – Providing objective review, challenge, and risk opinions on new products, transactions, and outsourcing arrangements.

3. Board & Management Accountability – Advising and reporting to the Board and Senior Management on the effectiveness of risk management practices across the Group and ensuring key risks are appropriately identified, assessed, monitored, and managed.

Key Responsibilities

Risk Framework and Risk Appetite

• Own the group enterprise risk management framework, including the risk taxonomy, risk register and risk policy suite, keeping each proportionate to the nature, scale and complexity of each entity.

• Develop group and entity-level risk appetite statements and translate them into key risk indicators (KRIs), limits and tolerances.

• Own and periodically review the enterprise risk, outsourcing/TPRM, BCM and credit risk policies and procedures, keeping them aligned with applicable MAS requirements and guidelines.

• Oversee the RCSA programme across all departments and entities, ensuring first-line assessments are validated and challenged, not just administered.

• Oversee the outsourcing framework end to end, from materiality assessment and service provider due diligence to the outsourcing register and ongoing monitoring, including intragroup arrangements between ICHX Tech entities.

Governance and Reporting

• Report regularly to Senior Management on top risks, performance against risk appetite, material incidents and open issues.

• Escalate material risks and breaches promptly to Senior Management.

• Oversee the incident and loss-event process, including root-cause analysis and tracking of remediation. Decide, together with Legal & Compliance, whether any regulatory notification is needed.

• Oversee the BCM programme, including the annual business impact analysis, continuity plan testing and crisis-management exercises. Ensure gaps are tracked to closure and recovery arrangements meet applicable regulations.

• Work with the Technology department, which owns technology risk management under the MAS Technology Risk Management Guidelines, on shared areas such as disaster recovery, technology outsourcing and cyber incidents. Ensure disaster recovery arrangements and recovery objectives match the business impact analysis.

Regulatory and Audit Engagement

• Act as the principal risk counterpart to MAS for inspections, thematic reviews and supervisory queries, working together with Legal & Compliance.

• Be accountable for remediating risk-related findings from MAS inspections, Internal Audit and external reviews. Ensure remediation actions are tracked to closure and open items are reported to Senior Management.

• Track regulatory developments that affect risk management, such as outsourcing and third-party risk guidelines and assess their impact on the group.

Risk Culture

• Build risk ownership in the first line: nominate risk owners, deliver risk training, and embed risk thinking into business decision-making.

Must-Have

• 8–10 years of experience in risk in financial services. Fintech experience is an advantage.

• Hands-on experience applying the MAS Guidelines on Outsourcing, including material outsourcing and intragroup arrangements and MAS expectations on business continuity management.

• Familiarity with the MAS Technology Risk Management Guidelines, sufficient to work effectively with the Technology department that owns technology risk management.

• Demonstrated experience presenting to senior stakeholders and managing MAS inspections or supervisory engagement.

• Strong stakeholder management, communication and influencing skills.

• Creativity and an appetite for continuous improvement.

• Experience building or scaling a risk function in a growth-stage company or a group with multiple entities.