Identity Governance & Cyber Risk Associate

HarbourVest Partners (Singapore); Boston (MA); Hybrid; USD 95,000 - 100,000; Full time

Benefits offered by this job

Discretionary annual bonus

Job summary

HarbourVest Partners (Singapore) is seeking a Technology Risk & Control Associate to automate Identity Governance and strengthen regulatory compliance across our global platform.

You will lead risk assessments, develop cybersecurity policies, and collaborate with Legal, Compliance, and Enterprise Risk to embed governance across the organization. This role requires proactive problem-solving and clear communication across technical and non-technical stakeholders.

Qualifications

• BS in Computer Science, Information Security, or equivalent work experience.
• CISM certification required within 1 year of employment.
• 1-2 years of relevant work experience in financial services or related field.

Responsibilities

• Develop automation around Identity Governance for external audits and governance controls.
• Develop and maintain cybersecurity policies, standards, and procedures for regulatory compliance.
• Lead risk assessments and audits to identify threats and mitigate vulnerabilities.
• Collaborate with Legal, Compliance, and Enterprise Risk to integrate cybersecurity initiatives.
• Monitor and report on cybersecurity program effectiveness using KPIs and metrics.
• Stay informed on cybersecurity trends and regulatory changes and implement updates.
• Manage relationships with external auditors, regulators, and collaborators to ensure compliance.

Skills

Identity Governance

Cybersecurity

Regulatory Compliance

Data Analytics

Communication

Project Leadership

Education

BS in Computer Science, Information Security, or equivalent work experience

CISM certification within 1 year

Job description

HarbourVest Partners (Singapore) is seeking a Technology Risk & Control Associate to automate Identity Governance and strengthen regulatory compliance across our global platform.

You will lead risk assessments, develop cybersecurity policies, and collaborate with Legal, Compliance, and Enterprise Risk to embed governance across the organization. This role requires proactive problem-solving and clear communication across technical and non-technical stakeholders.