Security Risk Manager (Banking, TPRM, Control Gap Assessment, MAS TRM, IT Audit)

Responsibilities:

• Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking.
• Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps.
• Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments.
• Review security policies and risk frameworks and recommend improvements to strengthen security governance.
• Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk.
• Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up.
• Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions.
• Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders.
• Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure.

Requirements:

• Bachelor of Engineering degree or equivalent technical qualification.
• 18+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit.
• Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
• Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation.
• Strong experience performing Security Assessments and control gap assessments.
• Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
• Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
• Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
• Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.