IT Audit & Technology Risk Specialist – Financial Services

About the role

We are seeking an experienced IT Audit and Technology Risk Specialist to support our financial services clients in Singapore. The role involves advising application owners and technology teams on risk and control matters, and partnering with senior stakeholders across the organization.

Key responsibilities

• Provide IT risk and technology controls advisory to application owners, technology teams and business stakeholders.
• Engage and manage senior stakeholders across Technology, Risk, Information Security, Business and COO functions.
• Lead end-to-end technology risk assessments, including RCSA, ERP, eRIC, SIAI, JDI, AIAI and RIAI activities.
• Identify control gaps, assess risk impact and develop practical mitigation and remediation plans.
• Support regulatory reviews, internal/external audits and technology control assessments, coordinating responses and remediation.
• Partner with Application Managers, Technology Leads, Information Security and Enterprise Risk teams to resolve audit findings and technology risk gaps.
• Perform any other ad‑hoc duties as assigned by the supervisor.

Required profile

• 3–5+ years of experience in IT risk, technology risk, IT controls, IT audit or technology governance, preferably in banking, financial services or payments.
• Relevant certifications such as CRISC, CISA or CISSP are preferred.
• Proven experience providing risk advisory or consulting support to technology and business stakeholders.
• Strong stakeholder‑management skills with senior technology, risk and information‑security leaders.
• Demonstrated ability to lead technology risk assessments, regulatory risk reviews and remediation programmes.
• Experience supporting regulatory reviews, audits and technology risk assessments.

Required skills

What we offer

• Contract role with competitive monthly remuneration (SGD 7,000 – 11,500).
• Opportunity to work with senior leaders in a dynamic financial services environment.
• Exposure to a wide range of technology risk frameworks and regulatory requirements.