Job Summary:
We are looking for a proactive and detail-oriented IT Risk Executive to support the IT Risk Management function within the organization. The role involves identifying, assessing, and mitigating risks related to IT infrastructure and operations, while ensuring compliance with key standards such as PCI DSS, ISO 27001, ISO 27701, PDPA, and other relevant regulations. The IT Risk Executive will assist in maintaining a secure and resilient IT environment, ensuring that the organization’s information systems are protected against potential risks.
Key Responsibilities:
- Risk Identification & Assessment:Assist in identifying and evaluating IT risks across different business functions.
Conduct regular risk assessments, security audits, and vulnerability assessments to detect potential risks or security gaps.
Support in documenting and maintaining the organization’s risk register.
- Compliance Support:Help ensure compliance with PCI DSS, ISO 27001, ISO 27701, PDPA, and other relevant regulations.
Assist in preparing for internal and external IT audits by gathering evidence, managing documentation, and coordinating with relevant stakeholders.
Monitor regulatory changes and support the implementation of necessary changes to meet compliance requirements.
- Incident Monitoring & Reporting:Assist in tracking and responding to IT security incidents, coordinating with other teams to resolve issues.
Maintain an incident log and report on security incidents and corrective actions taken.
- Policy and Procedure Development:Support the development, review, and update of IT risk policies, procedures, and guidelines.
Assist in ensuring that IT risk management policies are properly implemented and adhered to across the organization.
- Training & Awareness:Assist in conducting IT risk awareness training for employees, ensuring they are informed about key security practices and compliance requirements.
Help create awareness materials on best practices in information security and risk management.
- Documentation & Reporting:Prepare and maintain reports on IT risk activities, audit findings, and compliance status for management and regulatory bodies.
Assist in developing key metrics to track the effectiveness of IT risk management initiatives.
- Vendor Risk Management:Help assess third-party vendor risks, ensuring that external partners comply with the organization’s IT security and risk management standards.
Coordinate vendor reviews and help manage IT-related risks from external service providers.
Qualifications & Experience:
- Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or a related field.
- 2-3 years of experience in IT risk management, cybersecurity, or related roles.
- Familiarity with industry standards such as PCI DSS, ISO 27001, ISO 27701, and PDPA regulations.
- Understanding of risk assessment methodologies and cybersecurity frameworks.
- Strong analytical skills with the ability to assess risks and propose mitigation strategies.
- Excellent communication skills, both written and verbal, with the ability to work with cross-functional teams.
- Applicants must be Singaporean or Permanent Residents (PR)
