Business Function
Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
Requirements
Job Purpose
The LOBT Technology Risk Manager is responsible for managing Line 1.5 risk activities for the Line of Business Technology (LOBT) function. The role ensures robust identification, assessment, mitigation, and reporting of Technology and Operational risks. It includes ensuring regulatory compliance (India & Singapore), audit coordination, vendor and outsourcing risk oversight, and driving closure of issues and actions across Technology verticals.
The role also requires strong collaboration with Technology, Operations, Business, Compliance, and Group stakeholders to ensure effective governance, timely remediation, and proactive risk management.
Technology & Operational Risk Management
- Identification and Mitigation of Risks and Adherence to Defined Controls
The role requires proactive identification of technology and operational risks across the LOBT landscape by continuously assessing processes, systems, vendor engagements, and external dependencies. The incumbent is expected to evaluate potential points of failure, emerging threats, regulatory changes, and control gaps, and translate these into actionable mitigation plans. This includes ensuring that all defined controlsboth preventive and detectiveare consistently implemented, tested, and strengthened based on risk assessments and audit outcomes. The individual will drive timely remediation of issues, enhance control effectiveness, and work closely with crossfunctional stakeholders to ensure adherence to internal policies, regulatory expectations, and established technology governance frameworks. By fostering a riskaware culture and ensuring disciplined execution of controls, the role safeguards the bank's operational resilience and technology integrity.
Identify execution challenges and collaborate with senior Technology leaders to resolve them.
Assist Line of Business Technology teams in managing Technology and Operational risks.
- Monitor and track all risk issues and incidents for LOBT.
- Conduct Outsourcing Risk Assessments and ensure adherence to outsourcing governance.
Regulatory Compliance
- Drive and ensure regulatory compliance for LOBT across Singapore MAS and India RBI/SEBI requirements.
- Scan and interpret new regulatory circulars; evaluate gaps and drive remediation actions.
Audit Management
- Prepare comprehensively for upcoming audits by conducting proactive control checks, ensuring readiness of evidence, and identifying gaps in advance to support smooth and timely audit closures.
- Liaise and coordinate for internal/external audits impacting LOBT.
- Manage issue & action closure for LOBT across internal and external audits (excluding InfoSec).
- Ensure timely planning, execution, evidence readiness, and closure of findings.
RCSA & Controls Testing
- Prepare, maintain, and execute Risk Control Self-Assessments (RCSAs).
- Conduct periodic control testing and report results to stakeholders.
Collaboration and Communication:
- Collaborating with cross-functional teams to ensure Tech risk deliverables are met within committed deadlines
- Ensuring effective communication and collaboration across different technology teams and stakeholders
- Driving initiatives to enhance Tech Risk culture across units and create environment for proactive actions with regards to Tech Risks
Key Accountabilities/Responsibilities:
Required Experience
- 10+ years of experience in Technology Risk Management / Technology Audit / Information Security.
- Strong exposure to managing audits, compliance, and regulatory expectations (MAS, RBI, SEBI).
- Experience in issue management, controls testing, and operational risk processes.
- Strong analytical and communication skills for senior stakeholder engagement.
- Ability to identify control gaps and drive mitigation plans across diverse technology teams.
- Experience working in complex Technology environments within Banking.
Education / Preferred Qualifications
- Bachelor's degree in Computer Science, Information Technology, or Technology Management.
- Preferred: InfoSec specialization.
- Certifications such as CISA, CRISC, CISM, CISSP.
- Experience as Lead Auditor for IS audits (including ISO) preferred.
- Agile Scrum certification or exposure is an added advantage.
Core Competencies
- Strong understanding of Technology systems, dependencies, and risk points.
- Ability to engage senior stakeholders with clarity and structured communication.
- Proactive in escalation (red flag readiness) in the interest of the bank.
- Diligence, thoroughness, and adherence to timelines.
- Team orientation with the ability to collaborate across functions.
Technical Competencies
- Continuous improvement and innovation orientation.
- Strong grounding in risk frameworks, audit methodologies, and regulatory expectations.
- Handson experience with technology audits, remediation processes, and risk assessments.
- Understanding of DR, BCP, vendor risk, and deployment governance.
- Strong data analytics capability with the ability to interpret large datasets to identify trends, anomalies, and control gaps.
- Proficiency in using modern digital and analytical tools, including automation platforms and AIenabled solutions, to enhance risk monitoring, control testing, and governance oversight
