Senior Control Manager, Tech Risk and Governance

Contract Summary Box:
Location: Singapore
Contract Length: 2 weeks
Day Rate / Pay: 0.0
IR35 Status: [Not specified]
Start Date: 25/07/2026

The Senior Control Manager, Tech Risk and Governance is a critical role within the bank's technology risk management framework, reporting directly to the Chief Information Officer. This role focuses on strengthening the organisation's controls to ensure regulatory compliance, security, and resilience across technology operations in Singapore.

Key Skills & Experience

• 10 years of experience in Technology Risk Management, IT Audit, Information Security, or IT Compliance within financial services
• Strong knowledge and practical experience with MAS Technology Risk Management (TRM) Guidelines
• Familiarity with relevant regulatory frameworks such as PDPA, AML/CFT, and industry standards like ISO 27001, NIST Cybersecurity Framework, COBIT, ITIL
• Demonstrated understanding of banking operations and technology infrastructure
• Certifications such as CRISC, CISM, CISA, or CISSP are advantageous

Nice to Have

• None specified

Role Overview
The role involves conducting technology risk assessments, evaluating control effectiveness, and maintaining risk registers. It collaborates with internal teams to develop and implement risk mitigation plans, participate in compliance and regulatory audits, and contribute to policy development. The role also supports incident management, business continuity testing, and third-party risk assessments, providing expert guidance to stakeholders and producing risk reports for management and boards.

Key Responsibilities

• Conduct application, infrastructure, third-party, and cloud technology risk assessments to identify vulnerabilities and control gaps
• Evaluate the effectiveness of technology controls and recommend enhancements
• Maintain and update the technology risk register, tracking risks and mitigation actions
• Monitor risk metrics and Key Risk Indicators (KRIs) to identify potential issues early
• Participate in SDLC reviews to ensure security and risk considerations are incorporated from the start
• Collaborate with business and technology teams to develop risk treatment plans
• Interpret and monitor compliance with Singapore regulations and industry standards
• Participate in regulatory inspections and audits, providing documentation and explanations
• Track and report on regulatory findings and ensure timely remediations
• Assist in creating, reviewing, and updating policies, standards, and guidelines on technology risk management
• Drive awareness and compliance with risk policies across the organisation
• Support incident and business continuity plans, assessing root causes and remediation actions
• Conduct technology risk assessments for third-party vendors, ensuring security clauses are included in contracts
• Provide advice and training on technology risk and controls, developing awareness programs
• Prepare risk reports, dashboards, and presentations for management, risk committees, and the Board

Requirements

• Right to work in Singapore
• Available to start on 25/07/2026
• Located onsite in Singapore
• Minimum of 10 years’ experience in relevant fields

If you have the required skills and availability, please apply with an updated CV.