Technology Risk & Control Specialist

About the role

The Technology Risk & Control Specialist will lead end‑to‑end risk management for technology platforms, ensuring robust controls, regulatory compliance and effective mitigation across the organization.

Key responsibilities

• Drive risk engagement and end‑to‑end risk management across technology platforms, including ERP, RCSA, eRIC, SIAI, JDI, AIAI and RIAI.
• Lead quality‑assurance testing, business continuity planning for applications and adoption of new risk‑management tools such as JIRA.
• Communicate risk findings and reports to senior stakeholders and develop mitigation strategies.
• Assess regulatory changes (MAS, HKMA, CBRC, OJK, RBI, etc.) and coordinate related risk‑mitigation programmes.
• Collaborate with GCIBT application groups, risk leads and global information security to address internal and external audits, examinations and regulatory inquiries.
• Support business owners in remediating audit issues and compliance findings.
• Identify opportunities to streamline risk‑management processes and partner across divisions for execution.

Required profile

• Bachelor’s degree in IT or related field.
• 4‑6+ years of experience in IT risk audit, control or technology audit within banking or financial services.
• Experience in payments domain and application control testing.
• Knowledge of APAC regulatory frameworks and ability to drive regulatory risk programmes.
• Strong communication skills and confidence to influence senior stakeholders.

Required skills

• ERP risk management frameworks (RCSA, eRIC, SIAI, JDI, AIAI, RIAI).
• JIRA for risk‑management workflow.
• IT Risk Audit and Application Control Testing.
• Certifications: CRISC, CISSP, CISA (preferred).