Head IT Governance and Risk Asia

About the role

Julius Baer is hiring a Head of IT Governance and Risk for its Asia region. IT Governance and Risk Management is a regional function responsible for technology governance across key pillars and for overseeing risk management, working closely with IT functions to build a strong risk culture. It covers risk management and control assurance, aiming to strengthen the bank's IT operational, security and regulatory posture and give management risk transparency.

Key responsibilities

• Own and maintain the IT risk register, drive regular risk identification with IT service, platform and project owners, and ensure timely closure of risk actions.
• Coordinate and run key IT risk processes such as RCSAs, risk scenario analysis, KRIs and KPIs, and provide data-driven insight on technology and cyber risk exposure.
• Turn MAS and internal policy requirements (TRM, Cyber Hygiene, outsourcing/third-party, operational risk) into first-line controls, and lead gap assessments and remediation programmes.
• Act as the main IT interface with internal and external auditors, coordinating evidence and management responses.
• Work with Information Security, Non-Financial Risk, Compliance and COO to align risk treatment and RACI across the three lines of defence.
• Lead or chair the IT Risk Management Forum in Asia, and oversee dashboards and reports for senior IT management and risk committees.
• Drive continuous improvement of IT processes and controls, promote automation and simplify controls, and lead or support training and awareness for IT staff.
• Report risk to the IT Risk Management Committee and to the Operational Risk Committees in Singapore and Hong Kong.
• Build strong relationships with IT stakeholders, CRO functions, the COO and global IT governance and risk functions.
• Ensure ethical, compliant behaviour, including honesty, integrity, fair dealing, conflict of interest management and compliance with applicable laws.

Required profile

• Extensive experience in IT governance, technology risk or IT control roles within banking, preferably private banking or wealth management.
• Senior-level ability to influence senior stakeholders, challenge constructively and drive change across multiple IT domains.
• Excellent communication and stakeholder-management skills, with a track record engaging auditors, regulators and senior management on complex technology risk topics.

Required skills

• Strong understanding of MAS technology and operational risk expectations and industry frameworks such as ISO 27001, ITIL and COBIT.
• Familiarity with the technology regulatory framework and guidelines in Singapore (MAS) and Hong Kong (HKMA, SFC).