Technology Risk & Controls Analyst

Roles & Responsibilities: Technology Risk Management • Support risk reviews, risk assessments, and control effectiveness reviews across technology platforms. • Perform analysis of technology risks, emerging risks, and control gaps. • Track remediation actions arising from incidents, audits, assessments, and regulatory reviews. • Support RCSA activities and maintenance of risk registers. • Assist in KRI monitoring, trend analysis, and preparation of management reporting. • Conduct thematic reviews and root cause analysis of control deficiencies. • Prepare risk dashboards, metrics, and executive reports. • Support review of technology changes and associated risk controls. • Perform analysis of change failures, unauthorised changes, and change-related incidents. • Track change governance metrics and trend reporting. • Assist in improvement initiatives relating to change and release management processes. • Support cybersecurity governance activities and tracking of security risk remediation actions. Education: • Bachelor's Degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, Risk Management, or equivalent. • Professional certification in technology risk domains or equivalent Mandatory : • Minimum 3 years of experience in one or more of the following areas: • • Technology Risk Management • IT Governance • IT Controls • Cybersecurity Governance • Technology Compliance • IT Audit • Operational Risk • Service Resilience • Technology Project Governance Preferred : Experience in any of the following: • Risk assessments and control testing • Audit management • RCSA execution • KRI/KCI reporting • Incident and problem management • Regulatory compliance reviews • Cloud governance and security controls • Third-party risk management • Technology project risk oversight Experience within banking, financial services, fintech, regulated industries, or large-scale technology environments will be advantageous. Technical Competencies : Good understanding of: • Technology risk management lifecycle • Governance, Risk & Compliance (GRC) practices • ITIL processes • Cybersecurity principles • Operational resilience concepts • Regulatory and industry standards such as: • • MAS TRM Guidelines • MAS Notice 644 • MAS Notice 655 • ISO 27001 • NIST • COBIT Knowledge of data analysis tools such as Excel, Power BI, SQL, Python, or AI-enabled analytics tools will be advantageous. This role is for one of our project requirements