SA/AVP, Technology Risk Management as a 2nd LoD function

Role Purpose

Support the implementation and operation of the regional APD/ID Technology Risk Management Framework as an independent Second Line of Defence function. The role provides risk oversight, challenge and management reporting, supported by strong data-analysis, stakeholder management and reporting-automation skills.

Job Responsibilities

• Operationalize and maintain the regional Technology Risk Management Framework, policies, procedures and standards.
• Assess, monitor and report material technology, cyber, resilience and regulatory risks across APD/ID offices.
• Review and challenge LoD1 and LoD1.5 risk assessments, controls, incidents, issues, risk acceptances and remediation plans.
• Review existing KRIs and develop objective risk indicators were justified by regulation or a material risk gap.
• Support oversight of critical systems, vulnerabilities, technology changes, recovery readiness and ageing technology.
• Coordinate with IT Dept, branches, Head Office, Compliance, Internal Audit and other risk functions.
• Support Compliance on regulatory gap assessments and tracking of implementation of new technology-risk requirements.
• Collaborate with other risk teams to assess Technology Risk in the context of Enterprise Risk, Operational Risk, Operational Resilience, BCM, Third Party Risk and AI Risk Management.
• Prepare concise management reports, dashboards and thematic risk analysis.
• Communicate technical risks clearly to senior management and non-technical stakeholders.
• Promote consistent Technology Risk practices and a strong risk culture across APD/ID.

Analytics and Automation Responsibilities

• Analyze risk, incident, vulnerability, issue and remediation data to identify trends and emerging risks.
• Develop management dashboards using Microsoft Power BI.
• Use advanced Microsoft Excel, including formulas, Power Query, pivot tables and VBA/macros, to improve analysis and reporting.
• Automate recurring reporting and workflow activities using Microsoft tools.
• Experience with Power Apps, Power Automate and SharePoint would be an advantage.
• Translate business and risk requirements into practical dashboards, workflows and management information.

Job Requirements

• Degree in Information Technology, Computer Science, Engineering, Information Systems or a related field.
• 3 - 5 years' experience in Technology Risk, Cybersecurity, IT Audit, IT Compliance or Technology Governance, preferably in banking.
• Good knowledge of regional technology-risk regulations and recognized standards, such as MAS TRM, NIST Cybersecurity Framework, ISO 27001, ITIL and COBIT.
• Ability to conduct regulatory and control gap assessments and provide independent 2LoD challenge.
• Strong analytical skills and practical experience with Power BI and advanced Excel.
• Power Apps, Power Automate, SharePoint, VBA/macros or similar workflow-automation experience is advantageous.
• Professional certification such as CISA, CISM, CRISC or CISSP is advantageous.
• Strong written communication, management-reporting and stakeholder-engagement skills.
• Self-motivated, culturally sensitive and able to manage multiple priorities across regional stakeholders.