Deputy Manager/Assistant Manager – IT Governance, Risk & Compliance (GRC)

We seek a highly motivated and results-driven professional to join our team as Deputy Manager/Assistant Manager – IT Governance, Risk & Compliance (GRC).

Key Responsibilities

• Lead IT risk assessments across applications, infrastructure, cloud services, cybersecurity, digital platforms, third-party providers, AI solutions, and emerging technologies

• Develop and maintain IT risk frameworks, risk registers, Key Risk Indicators (KRIs), dashboards, and reporting mechanisms

• Provide independent risk oversight and challenge on technology projects, digital transformation initiatives, system implementations, and AI adoption

• Monitor technology risk exposures, incidents, audit findings, control weaknesses, and remediation progress

• Ensure alignment with regulatory requirements, industry standards, and technology risk management best practices

• Lead Business Continuity Management (BCM) initiatives, including business impact assessments, continuity testing, and recovery readiness reviews

• Support information security risk assessments and monitoring under the Information Security Management System (ISMS)

• Strengthen technology risk awareness and foster a proactive risk management culture across the organization

Qualifications and Experience

• A bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering or a related discipline

• Minimum 5 years of relevant experience in IT Risk Management, Technology Risk, IT Audit, Cyber Risk, Information Security Risk, Operational Resilience or Technology Governance

• Experience in banking, financial services, FinTech or other regulated industries would be an advantage

• Sound knowledge of technology risk frameworks and standards including ISO/IEC 27001, ISO 22301, COBIT, and NIST

• Familiarity with cloud risk, third-party risk, AI governance, emerging technology risk and ISO/IEC 42001 would be an added advantage

• Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT or relevant ISO Lead Implementer/Auditor certifications would be advantageous

Key Skills and Attributes

• Strong analytical, risk assessment and problem-solving capabilities

• Excellent communication, stakeholder management and report-writing skills

• Ability to translate complex technology risks into clear business insights

• Sound professional judgment, integrity and attention to detail

• A proactive, independent and results-oriented approach