SVP, Head of Technology and Operational Risk Audit

Company: 2201 United Overseas Bank (Malaysia) Bhd About UOB United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values – Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow. Job Description Role Purpose Hands-on Senior Audit Leader for the Technology and Operational Risk Audit portfolio, providing independent, forward-looking assurance over the bank's technology, cybersecurity, digitalisation, data, artificial intelligence and operational risk landscape. The role combines deep subject-matter credibility with disciplined audit execution, persuasive stakeholder engagement and visible people leadership. The successful candidate will translate emerging technology, operational risk and regulatory developments into a focused audit response, deliver the approved audit plan to schedule and quality, and build a high-performing team with strong bench strength and future-ready skills. Leadership Mandate • Own and execute the risk-based Technology and Operational Risk Audit plan, maintaining rigorous control over scope, resources, quality and reporting timelines. • Provide an independent view of whether technology, cybersecurity and operational risks are understood, governed and controlled within risk appetite. • Act as a trusted but appropriately challenging adviser to senior Technology & Operations leaders, Operational Risk Management, senior management, governance committees and the Board. • Partner closely with Group Technology Audit and other Internal Audit leaders on thematic, cross-border and integrated audits. • Set the direction for technology-enabled auditing, including advanced data analytics, automation and responsible use of Gen AI across the audit lifecycle. • Provide technical leadership and constructive challenge to the Innovation & Decision Science team, helping translate analytics, automation, network analysis and Gen AI into scalable, well-governed audit capabilities. • Build leadership depth through active coaching, succession planning differentiated development and disciplined performance management. Key Responsibilities 1. Audit Plan Delivery and Project Management • Deliver the approved Technology and Operational Risk Audit plan on schedule, without compromising independence, audit quality or risk coverage. • Apply strong audit project management across the audit lifecycle and remain actively involved in audit execution, providing constructive challenge to deliver high-quality outcomes for stakeholders. • Maintain transparent portfolio oversight and proactively manage delivery risks. • Allocate resources effectively and provide hands-on leadership for complex, sensitive or off-track audits. • Ensure all audit work and reporting meet Internal Audit methodology and quality standards. 2. Technology, Cybersecurity and Digital Assurance • Lead assurance over cybersecurity, cloud and third-party technology risk, infrastructure, applications, data protection, operational resilience and technology service management. • Assess digital banking, mobile, APIs, payments, change delivery and production stability. • Identify emerging technology risks and ensure timely audit coverage 3. Operational Risk Management Assurance • Lead assurance over operational risk management frameworks, governance, risk appetite, RCSA, key risk indicators, incident and loss-event management, scenario analysis and issue management. • Assess the effectiveness of first-line ownership and second-line oversight of operational risks. • Evaluate operational risk events, root-cause analysis and remediation effectiveness. • Use data and thematic analysis to identify recurring incidents, control weaknesses and emerging risks. 4. Data Analytics, Automation and Gen AI • Embed data analytics into audit planning, testing, risk assessment and continuous monitoring. • Champion automation and reusable analytics that improve assurance coverage and productivity. • Lead responsible Gen AI adoption and partner with the Innovation & Decision Science team to develop scalable analytics, automation and AI audit capabilities, providing technical guidance and constructive challenge on solution design and control considerations 5. Reporting, Influence and Regulatory Engagement • Produce concise, evidence-based reports with clear root causes, risk implications and required actions. • Provide updates to senior management, the Audit Committee and the Board. • Engage credibly with regulators, including Bank Negara Malaysia, when required. 6. Talent Development and Coaching Leadership • Lead, coach and develop technology and operational risk auditors. • Build capability across cybersecurity, operational risk, digitalisation, analytics, Gen AI, project delivery and audit leadership. • Develop talent through coaching, feedback, development opportunities and senior stakeholder exposure. • Strengthen succession pipelines and build internal and external talent benches. Job Requirements • Approximately 20 years or more of relevant experience in technology audit, cybersecurity, technology risk, operational risk management or related fields, preferably in technology, consulting, IT service providers, banking or financial services. • Demonstrated leadership of a significant technology and/or operatio…