AVP, Group Information Security & Digital Risk Management

What you do

• Data-Driven Risk Management: Drive projects or initiatives that leverage big data platforms, including data analytics tools and visualization techniques, to analyse large datasets and derive risk insights. This includes partnering with key stakeholders, tracking project status, and providing recommendations to senior management.
• Risk Governance and Oversight: Drive or support risk governance activities; provide independent and effective challenge (e.g., on risk mitigation programs) to strengthen the effectiveness of technology, information or cyber risk management across Group.
• Risk Monitoring and Reporting: Perform regular risk monitoring and management reporting on risk posture to senior management and the Board.
• Control Review and Enhancement: Support the review and enhancement of controls to better mitigate against emerging technology, information and cyber risks.
• Regulatory Compliance: Lead or support bank-wide initiatives to work towards compliance with applicable legal & regulatory requirements (e.g., Cybersecurity Act, MAS Technology Risk Management Guidelines).

Who you work with

Group Risk Management works independently to protect, build, and drive our businesses. The team supports good decision-making with strong risk analysis. It plays a crucial role in sharpening our competitive edge and optimizing risk-adjusted returns. It's about seeking and adopting best-in-class practices, protecting the group from unforeseen losses, and keeping risk within appetite while embracing change and managing growth in one of the world's strongest banks.

Qualifications

Who you are

• Degree in Computer Science or equivalent technical degree.
• Relevant professional certifications (e.g., CISA, CISM, CRISC or PMP) would be advantageous.
• More than 7 years of relevant experience in technology, information or cyber risk management, information security or IT audit within the financial services industry. Candidates with strong data analytics skills and experience working with big data platforms, machine learning, and AI applications in risk management are encouraged to apply, even if their risk management experience is less extensive.
• Proficient in data analytics tools and visualization techniques (e.g., SQL, Python, PowerBI); experience with big data platforms (e.g., Hadoop) would be advantageous.
• Familiar with machine learning and AI applications in risk management.
• Proficient knowledge of technology risk management guidelines from MAS or any regional regulators.
• Good written and communication skills, as well as solution-oriented.
• Ability to contribute through others, collaborate well across seniority, cultures, and locations.
• Proactive and able to work well under pressure or tight deadlines.