Head IT Governance and Risk Asia

About the role

Julius Baer is hiring a Head of IT Governance and Risk for its Asia region. IT Governance and Risk Management is a regional function responsible for technology governance across key pillars and for overseeing risk management, working closely with IT functions to build a strong risk culture. It covers risk management and control assurance, strengthening the bank's IT operational, security and regulatory posture.

Key responsibilities

• Own and maintain the IT risk register, drive regular risk identification with service, platform and project owners, and ensure timely closure of risk actions.
• Coordinate and run key IT risk processes such as RCSAs, risk scenario analysis, KRIs and KPIs, and give data-driven insight on technology and cyber risk.
• Turn MAS and internal policy requirements (TRM, Cyber Hygiene, outsourcing/third-party, operational risk) into first-line controls, and lead gap assessments and remediation.
• Act as the main IT interface with internal and external auditors, coordinating evidence and management responses.
• Work with Information Security, Non-Financial Risk, Compliance and COO to align risk treatment and RACI across the three lines.
• Lead or chair the IT Risk Management Forum in Asia, and oversee dashboards and reports for senior management and risk committees.
• Drive process improvement, promote automation and simplify controls, and lead or support training and awareness for IT staff.
• Report risk to the IT Risk Management Committee and to the Operational Risk Committees in Singapore and Hong Kong.
• Build strong relationships with IT service owners, infrastructure and application managers, CRO functions, COO and global IT governance and security functions.
• Ensure ethical, compliant behaviour, including fair dealing, conflict of interest management and adherence to applicable laws.

Required profile

• Extensive experience in IT governance, technology risk or IT control roles in banking, preferably private banking or wealth management.
• Senior-level ability to influence stakeholders, challenge constructively and drive change across multiple IT domains.
• Excellent communication and stakeholder-management skills, with a track record engaging auditors, regulators and senior management.

Required skills

• Understanding of MAS technology and operational risk expectations and industry frameworks such as ISO 27001, ITIL and COBIT.
• Familiarity with the technology regulatory framework in Singapore (MAS) and Hong Kong (HKMA, SFC).