Security Regulatory and Compliance Lead, Information Security Services

About the role

DBS is hiring an AVP/SA, Security Regulatory and Compliance Lead within its Group Technology division, which manages the majority of the bank's operational processes and delivers banking services through multiple channels. The role acts as first line of defense and focal point for risk and control matters, covering risk reviews, control testing, audit and regulatory compliance, and cybersecurity policy.

Key responsibilities

• Act as first line of defense and focal point for the team's risk and control matters, coordinating programs to improve the bank's risk posture.
• Manage approvals, risk reviews, process refinements, SOP development and reporting, and propose automation and document templating to improve efficiency.
• Collaborate across units to reduce risk, review action plans and verify remedial solutions, and oversee risk mitigation programs to close control gaps.
• Develop frameworks and metrics for risk mitigation, escalate at-risk issues, and manage risk reviews, control testing and key risk indicator analysis.
• Ensure proper documentation of risk mitigation programs and provide training to build a strong risk culture.
• Support internal and external audits and regulatory reviews, coordinate responses to regulator notices, advisories and queries, and report status to management.
• Assist the bank's cybersecurity program, including policies, regulatory audits, compliance metrics and reporting to senior management.
• Monitor new security regulations and assess their impact on the bank's security policy architecture, working with regional information security services teams.

Required profile

• At least three years' experience in technology development and support, vendor management, technology implementation or technology risk management.
• Prior experience or knowledge of technology and operational risk lifecycle management, IT audit, governance and risk management programs, and deep-dive investigations of control and process issues.
• Ability to communicate risk and control findings, develop recommendations and produce accurate metrics and management reports.
• Good control mindset, strong analytical and problem-solving skills, and independent work with minimal supervision.

Required skills

• Well versed in governance and control frameworks.
• Sound understanding of technical processes, policies and risk measurement.
• Strong written and verbal communication with stakeholders, management and technical units.
• Experience using programming skills to analyse data for risk reviews and assessments.