Risk and Control Specialist - DSG SG

Responsibilities: Technology Risk Management As a part of the Risk and Control team (RCU) of Digital SG, the candidate will need to work with the stakeholders and relevant teams by: • Technology Risk Management: Provide expertise on technology risk and regulatory compliance, focusing on digital banking platforms, APIs, and cloud technologies • Risk Assessment and Mitigation: Oversee risk assessments, including outsourcing risk and common high-risk areas, and provide guidance on mitigation strategies • Compliance and Governance: Assess compliance exposure to security, digital automation, AI, data analytics, and technology-related regulatory requirements, and drive remediation efforts • Risk Management: Monitor and report risk indicators, escalate operational risk events, and collaborate on risk mitigation strategies • Regulatory Compliance: Perform regulatory gap analysis, ensure adequate risk and control measures, and manage regulatory expectations • Policy and Procedure Alignment: Collaborate with stakeholders to ensure departmental policies and procedures are effective, updated, and aligned with the Bank ’ s risk framework Champion the Risk and Compliance Culture • Support Head of RCU/HOD to champion Risk and Compliance culture, and provide relevant risk and compliance updates / training within the department • Work in collaboration with 2nd LOD in developing relevant risk and compliance updates / training materials / risk culture initiatives for the department • Ensure continuous upskilling of own capabilities on risk and compliance knowledge to enable effective risk identification, assessment and control across the functions of the department Regulatory Compliance • Support Head RCU/HOD/CIB in addressing requirements and audit requests of local regulators with respect to non-financial risks and regulatory compliance, ensuring departmental non-financial risk controls and practices are following the applicable banking laws, regulations, internal policies and procedures • Stay abreast of industry trends, regulatory developments and best practices in non-financial risk and compliance risk to continuously enhance departmental risk management capabilities and operational resilience Requirements: Qualifications • Degree holder, or Professional Qualification in the relevant discipline such as Banking, Finance, Computer Science, or Business Professional Qualification and/or Regulatory, Licensing Requirements • Professional information security certifications such as CISA, CRISC, and/or CISSP • Sound knowledge in regulatory requirements (e.g. MAS Notice FSM-05, FSM-06, and TRM guidelines) and industry standards/ frameworks such as NIST, ISO 27001/2, Cyber Security Act, and MAS Outsourcing/Risk Management Guidelines. • Professional or post graduate qualifications e.g. AML/CFT and TFS Certification, Regulatory Compliance Certification and the equivalent issued by an acknowledged institution and/or regulatory bodies, will be added as advantage Relevant Work Experience • Minimum 8 years of work experience, preferably with 1st line or 2nd line working experience in banking industry, digital transformation projects, and/or from commercial law enforcement team • Possess strong prior experience and knowledge in technology, digital control frameworks, cyber standards and policy review, oversight and governance, risk management, and IT audit. • Strong analytical and problem-solving skills with the ability to deliver pragmatic solutions to risk issues independently Competencies/Skills • Good communication skills both verbal and written • An understanding of risk drivers and ability to articulate risk to non-risk personnel • Understanding of how a bank operates front to back • A deep understanding of cybersecurity, technology, cloud environments, and fraud risk management requirements of a universal bank • Strong understanding of digital banking architectures, system requirements, APIs, data platforms, and infrastructure • Experience in being able to contribute to methodology enhancement and assurance methodologies • Experience working in or supporting Agile / DevOps / digital transformation environments • Develop strong partnership and collaboration with the various business units, Risk, Compliance, Technology, and RCU teams with the achievement of the common goals in mind