Head of Technology, Cybersecurity & AI Risk

About the role

We are looking for an experienced Head of Technology, Cybersecurity & AI Risk to lead the organisation’s second‑line oversight of technology, information security, cybersecurity and AI risks. Reporting to the Chief Risk Officer, you will shape the risk management framework, policies and appetite across these domains while providing independent challenge to senior stakeholders.

Key responsibilities

• Lead and continuously enhance the Technology, Cybersecurity and AI Risk Management Framework.
• Define and oversee risk appetite, policies, standards and governance practices.
• Provide independent oversight of technology risk, cloud environments, operational resilience, outsourcing and third‑party risks.
• Oversee cybersecurity risk management, including identity and access management, vulnerability management, penetration testing and data protection controls.
• Establish and manage the AI Risk Framework to ensure responsible and compliant AI adoption.
• Develop and monitor key risk indicators, ensuring timely escalation and remediation of material issues.
• Present risk insights, emerging threats and risk posture updates to senior management, board committees and regulators.
• Build strong partnerships with Technology, Cybersecurity and AI teams while maintaining effective independent challenge.
• Support regulatory engagements and ensure compliance with relevant regulatory expectations.

Required profile

• 15+ years of experience in technology, cybersecurity and risk management within banking, financial services, fintech or related environments.
• Strong understanding of cloud‑native technologies, operational resilience and technology risk management.
• Experience developing or overseeing AI governance, AI risk management or responsible AI frameworks.
• Familiarity with MAS regulations on technology risk, cybersecurity, outsourcing, operational resilience and AI governance.
• Proven track record engaging with regulators and presenting to senior executives and boards.
• Excellent analytical, communication and stakeholder‑management skills.

Required skills

• Cloud‑native technologies
• Identity and access management (IAM)
• Vulnerability management
• Penetration testing
• Data protection controls
• AI governance frameworks