IT Risk Manager

About the role

The IT Risk Manager will lead the bank’s technology risk and cyber‑security governance, ensuring adherence to local regulatory requirements and internal policies. This role works closely with business owners, IT teams and senior management to monitor, assess and mitigate IT‑related risks.

Key responsibilities

• Ensure compliance with MAS Notices and Guidelines, including MAS Notice 644 (Technology Risk Management), MAS Guidelines on Technology Risk Management and MAS Notice 655 (Cyber Hygiene).
• Maintain alignment with HLBB/HLBS IT Governance, policies and procedures, covering IT, cyber and security standards.
• Establish and oversee processes for tracking and monitoring cyber, IT security and IT incidents, ensuring timely escalation, remediation and closure validation.
• Review due‑diligence performed by business owners for outsourcing and non‑outsourcing service providers.
• Conduct independent reviews of Risk and Control Self‑Assessment (RCSA) for the IT department and other assigned departments.
• Validate gap analyses against new or revised IT regulations and ensure remediation within defined timelines.
• Prepare reports for Senior Management Committee, Risk & Compliance Governance Committee and Regional Risk Management Committee to provide oversight of cyber risk, system stability and risk appetite.
• Ensure consistency of IT Risk Management policies, methodologies and processes through annual SOP reviews and gap assessments against published regulations.
• Undertake other tasks and projects assigned by Management as required.

Required profile

Required skills