Senior Analyst / Assistant Vice President, Technology Risk Management (Risk Management Department)

SA/AVP, Technology Risk Management as a 2nd LoD function Role Purpose Support the implementation and operation of the regional APD/ID Technology Risk Management Framework as an independent Second Line of Defence function. The role provides risk oversight, challenge and management reporting, supported by strong data-analysis, stakeholder management and reporting-automation skills. Job Responsibilities Operationalize and maintain the regional Technology Risk Management Framework, policies, procedures and standards. Assess, monitor and report material technology, cyber, resilience and regulatory risks across APD/ID offices. Review and challenge LoD1 and LoD1.5 risk assessments, controls, incidents, issues, risk acceptances and remediation plans. Review existing KRIs and develop objective risk indicators were justified by regulation or a material risk gap. Support oversight of critical systems, vulnerabilities, technology changes, recovery readiness and ageing technology. Coordinate with IT Dept, branches, Head Office, Compliance, Internal Audit and other risk functions. Support Compliance on regulatory gap assessments and tracking of implementation of new technology-risk requirements. Collaborate with other risk teams to assess Technology Risk in the context of Enterprise Risk, Operational Risk, Operational Resilience, BCM, Third Party Risk and AI Risk Management. Prepare concise management reports, dashboards and thematic risk analysis. Communicate technical risks clearly to senior management and non-technical stakeholders. Promote consistent Technology Risk practices and a strong risk culture across APD/ID. Analytics and Automation Responsibilities Analyze risk, incident, vulnerability, issue and remediation data to identify trends and emerging risks. Develop management dashboards using Microsoft Power BI. Use advanced Microsoft Excel, including formulas, Power Query, pivot tables and VBA/macros, to improve analysis and reporting. Automate recurring reporting and workflow activities using Microsoft tools. Experience with Power Apps, Power Automate and SharePoint would be an advantage. Translate business and risk requirements into practical dashboards, workflows and management information. Job Requirements Degree in Information Technology, Computer Science, Engineering, Information Systems or a related field. 3 - 5 years’ experience in Technology Risk, Cybersecurity, IT Audit, IT Compliance or Technology Governance, preferably in banking. Good knowledge of regional technology-risk regulations and recognized standards, such as MAS TRM, NIST Cybersecurity Framework, ISO 27001, ITIL and COBIT. Ability to conduct regulatory and control gap assessments and provide independent 2LoD challenge. Strong analytical skills and practical experience with Power BI and advanced Excel. Power Apps, Power Automate, SharePoint, VBA/macros or similar workflow-automation experience is advantageous. Professional certification such as CISA, CISM, CRISC or CISSP is advantageous. Strong written communication, management-reporting and stakeholder-engagement skills. Self-motivated, culturally sensitive and able to manage multiple priorities across regional stakeholders.