ICT Risk Officer, Risk & Compliance

• Develop and maintain the ICT risk management framework
• Conduct ICT risk assessments across systems, projects, infrastructure and third-party service providers and maintain the ICT Risk Register
• Assess emerging technology risks including cloud, digital transformation, AI and cyber risks
• Monitor key risk indicators relating to ICT and prepare monthly, quarterly and annual ICT risk reports
• Escalate significant technology risks to management and relevant committees and track mitigation actions
• Monitor the organisation's security posture, investigate information security incidents and review vulnerability assessments and remediation
• Monitor security tools such as SIEM, EDR, DLP, firewalls and endpoint security solutions
• Ensure compliance with regulatory requirements on technology risk and support risk reviews for new systems and projects
• Participate in business continuity and disaster recovery assessments and support internal and external audits on ICT risk
• Assess technology risks associated with vendors and service providers and monitor outsourced technology services
• Promote risk awareness across ICT and business functions

Qualifications & Experience:

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Risk Management or a related field
• Professional certification such as CRISC, CISA, CGEIT, ISO 31000 Risk Management or CISSP
• Over 3 years' experience in ICT risk, technology audit, IT governance or enterprise risk management
• Experience in regulated industries is desirable

Skills & Competencies:

• Risk assessment and analysis
• Governance and regulatory compliance
• Technology risk management
• Report writing and communication
• Stakeholder management