Technology Risk Analyst – Third-Party Risk _ Contract

Technology Risk Analyst – Third-Party Risk We are seeking an experienced Technology Risk Analyst to support the security review and assessment of third-party service providers and outsourcing arrangements for a leading financial institution. This is a 06 -month contract position based in Changi, with employment through NTT Singapore. Key Responsibilities • Conduct due diligence and technology-risk assessments of third-party service providers and outsourcing arrangements. • Assess information security, cybersecurity, cloud, technology, operational and compliance risks. • Review vendor questionnaires, policies, certifications, audit reports and supporting control evidence. • Evaluate the design and effectiveness of security and technology controls. • Identify control gaps, risk exposures and areas of non-compliance. • Document assessment findings, risk ratings and practical remediation recommendations. • Engage vendors, business stakeholders, technology teams and control owners to clarify findings and obtain evidence. • Track identified risks, remediation actions and outstanding documentation through closure. • Prepare clear assessment reports and management updates. • Support compliance with internal policies, control frameworks and applicable MAS regulatory expectations. Requirements • Diploma or degree in Information Technology, Cybersecurity, Information Systems, Risk Management or a related discipline. • Relevant experience in third-party risk management, vendor due diligence, technology risk, cybersecurity risk, IT audit or information security reviews. • Experience reviewing technology controls, supporting evidence and audit documentation. • Knowledge of IT general controls, access management, change management, vulnerability management, incident management and business continuity. • Familiarity with cloud security, outsourcing risk and technology-risk controls. • Understanding of recognised frameworks such as ISO 27001, NIST, COBIT, SOC 1 or SOC 2. • Familiarity with MAS technology-risk and outsourcing expectations would be advantageous. • Strong analytical, documentation, report-writing and stakeholder-management skills. • Ability to work independently and manage multiple assessments within agreed timelines. • Professional certifications such as CISA, CISSP, CRISC, CISM or ISO 27001 would be advantageous. Interested candidates are kindly requested to email their CV with their experience to sandeep.sringeripai@global.ntt We look forward to your application!