AVP/VP, Technology Risk Management, Tech COO, Group Technology

About the role

Technology is central to DBS's vision of being the leading bank in Asia, and Technology Risk Managers are needed to ensure robust risk governance as technology advances and customer demands grow. As part of the Technology Risk Management team, you will oversee a portfolio of technology risk activities, ensuring the bank's Technology Risk Framework aligns with regulatory requirements, industry best practice and internal policy, while identifying vulnerabilities and recommending mitigations. The role is based at the DBS Asia Hub and is a regular, full-time position.

Key responsibilities

• Enforce and validate policies, standards and guides
• Manage technology risk, Key Risk Indicators (KRIs) and Key Controls Indicators (KCIs)
• Collaborate with Legal and Compliance on technology regulatory reporting
• Perform annual risk attestation and annual Risk Control Self-Assessment (RCSA) against the Technology Risk Controls Library
• Review risk approvals and manage vendor risk
• Provide risk assessments and advice, and give actionable recommendations to senior management for risk mitigation
• Ensure compliance with policies, standards and regulatory requirements, and close risks arising from internal and external reviews, audits and regulator inspections
• Work with technology stakeholders to identify risks technically and drive remediation, and prepare technology risk materials for risk forums
• Manage internal and external technology reviews and audits, and lead technology risk initiatives

Required profile

• At least 5-8 years of experience, preferably in technology risk management
• Bachelor's or master's degree in computer science or a related field
• Certification such as CISA, CISSP, CRISC or CISM (required)
• Experience driving IT risk management and communicating with IT, senior management and line staff

Required skills

• Technical exposure to IT application or infrastructure development, support and management
• Ability to translate technical risks into business impact
• Leadership in driving a culture of risk awareness