Security Risk Manager (Banking, TPRM, Control Gap Assessment, MAS TRM, IT Audit)

Responsibilities: • Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking. • Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps. • Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments. • Review security policies and risk frameworks and recommend improvements to strengthen security governance. • Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk. • Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up. • Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions. • Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders. • Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure. Requirements: • Bachelor of Engineering degree or equivalent technical qualification. • 18+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit. • Strong Banking/Financial Services domain experience, preferably within a large banking organisation. • Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation. • Strong experience performing Security Assessments and control gap assessments. • Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks. • Strong experience in Regulatory Engagement and coordination with regulatory stakeholders. • Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination. • Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.