IT Risk Specialist

About the role

The NETS Group, a payments services group operating Singapore's national debit scheme, is hiring an IT Risk Specialist in Braddell. Working as a second line of defence, the role works with first-line functions to identify, assess, monitor and report key IT risks, and collaborates with divisions to understand and document controls and find areas for improvement. Experience in IT and cybersecurity risk management is required, along with good communication and written skills.

Key responsibilities

• Support the implementation and operation of the IT risk management framework, policies, processes and procedures
• Assist in identifying, prioritising, assessing, monitoring and reporting key IT risks
• Conduct risk and controls self-assessments (RCSA), operational loss event reporting and assess risk control adequacy and effectiveness
• Monitor and report risk tolerances and key risk indicators
• Support incident risk management and escalation, and IT risk-related projects and initiatives
• Assist in risk committee meetings, risk awareness training and staff workshops
• Maintain a trusted, collaborative relationship with stakeholders to promote risk awareness and resiliency

Required profile

• Minimum 4+ years of experience in IT risk, including IT disaster recovery/business continuity and resiliency
• Experience in a regulated financial industry
• Knowledge of current Singapore regulatory requirements and industry best practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene, Cyber Security Code of Practice for Critical Information Infrastructure, FSM-N13, FSM-14)
• Good working knowledge of risk management and control concepts, with attention to detail and ability to investigate deeply
• Strong stakeholder management, collaboration, written and verbal communication in English, and problem-solving skills under tight deadlines

Required skills

• IT risk management and RCSA
• IT disaster recovery/business continuity and resiliency
• Regulatory frameworks such as MAS TRM Guidelines and MAS Cyber Hygiene
• IT operations, internal/IT audit and risk certifications (e.g. ITIL, CISSP, CRISC) are an added advantage