Head IT Governance and Risk Asia

About the Company

Responsibilities

• ● Own and maintain the IT risk register, drive regular risk identification with IT service, platform, and project owners, and ensure appropriate assessment, treatment plans, and timely closure of risk actions
• ● Coordinate and execute key IT risk processes such as RCSAs, risk scenario analysis, KRIs/KPIs, and providing clear, data driven insights on technology and cyber risk exposure
• ● Translate MAS and internal policy requirements (e.g., TRM, Cyber Hygiene, outsourcing/third party, operational risk) into practical first line controls and procedures, and lead gap assessments and remediation programmes
• ● Act as primary IT interface with internal and external auditors for first line topics, coordinating evidence, management responses, and sustainable closure of findings related to IT governance, risk, and security
• ● Partner closely with Information Security, Non-Financial Risk, Compliance and COO to ensure consistent risk treatment, clear RACI across the three lines, and robust governance for high risk initiatives and changes
• ● Chair or play a leading role in IT Risk Management Forum in Asia ensuring effective escalation, challenge, and decision making for material risks, incidents, and exceptions.
• ● Oversee IT risk and governance dashboards and reports for senior IT management and relevant risk committees, covering incidents, audit/regulatory issues, key risk indicators, and remediation status
• ● Drive continuous improvement of IT processes and controls, promoting automation and simplification while maintaining a strong control environment
• ● Lead or support training and awareness for IT staff on technology risk, security, and governance requirements, reinforcing first line ownership and a strong risk culture
• ● Responsible for risk reporting to IT Risk Management Committee as well as Operational Risk Committees in Singapore and Hong Kong.
• ● IT stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers
• ● CRO functions - including Business Operational Risk, Information Security and Compliance functions
• ● COO - Third Party Risk Management, Business Continuity
• ● Global functions - IT Governance, IT Risk Management, Information Security
• ● Establish strong relationship with key stakeholders
• ● Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

Requirements

• ● Excellent communication and stakeholder management skills, with a track record of engaging auditors, regulators, and senior management on complex technology risk topics
• ● Demonstrated ability to operate at senior level, influencing senior stakeholders, challenging constructively, and driving change across multiple IT domains
• ● Extensive experience in IT governance, technology risk, or IT control roles within banking, preferably private banking or wealth management
• ● Strong understanding of MAS technology and operational risk expectations, as well as industry frameworks (e.g., ISO 27001, ITIL, COBIT) and cyber risk practices
• ● Familiarity with technology regulatory framework and guidelines in Singapore (MAS) and Hong Kong (HKMA, SFC etc.)