VP, Technology Governance & Control Specialist
- Posted a month ago
- Be among the first 10 applicants
Job Description
Key Responsibilities
Governance Framework and Policy Oversight
Qualifications and Experience
Governance Framework and Policy Oversight
- Lead the Technology Governance and Controls function across Singapore and in-scope entities.
- Develop, maintain, and enhance governance frameworks, policies, standards, procedures, and control requirements for key technology domains.
- Ensure governance requirements are embedded into technology processes and supported by clear accountability, documented evidence, and traceable control execution.
- Drive consistency and standardization of governance practices with regional and Head Office expectations where applicable.
- Oversee control assurance activities, quality reviews, and governance assessments across key technology areas, including:
- System Development / SDLC,
- IT service management,
- IT operations,
- IT asset management,
- Identity and Access Governance,
- Privileged Access Governance,
- Cybersecurity operations,
- External systems / third-party technology governance.
- Assess the adequacy of control design and operating effectiveness, and identify gaps, weaknesses, and improvement opportunities.
- Maintain assessment methodologies, review criteria, and evidence standards aligned with internal and regulatory expectations.
- Lead coordination for internal audit, external audit, and regulatory inspections relating to technology governance and controls.
- Review observations, prepare responses, challenge issues where appropriate, and ensure factual accuracy and proportionality in issue assessment.
- Oversee remediation governance, including action planning, milestone tracking, dependency management, evidence review, escalation, and closure validation.
- Ensure identified issues are remediated in a timely, sustainable, and well-governed manner.
- Prepare and present management reporting on governance posture, risk exposure, audit themes, remediation progress, and structural delivery challenges.
- Highlight key execution risks, cross-team dependencies, ownership gaps, and slippage concerns requiring management intervention.
- Support governance committees and senior management forums with actionable, well-structured insights.
- Work closely with local and regional stakeholders to strengthen governance alignment across entities.
- Act as a liaison between business, technology, risk, compliance, audit, and regional teams on governance and control matters.
- Support regional uplift initiatives and governance harmonization efforts across APAC where required.
- Drive continuous improvement in governance processes, controls, reporting, and evidence quality.
- Promote stronger process discipline, accountability, and awareness of governance requirements across teams.
- Develop and deliver training, guidance, and awareness initiatives to improve understanding and adoption of governance standards and control expectations.
Qualifications and Experience
- Bachelor's degree in Information Technology, Computer Science, Information Security, Risk Management, or a related discipline.
- At least 10–15 years of relevant experience in Technology Governance, IT Risk, IT Controls, Technology Assurance, or Information Security Governance.
- Experience in the banking or financial services sector is strongly preferred.
- Demonstrated experience in audit and regulatory engagement, control reviews, governance assessments, and remediation oversight.
- Experience working across regional, multi-entity, or franchise environments is advantageous.
- Strong knowledge of technology governance, risk, and controls across:
- IT operations,
- ITSM,
- SDLC,
- ITAM,
- IAM / IGA,
- Privileged access controls,
- Cybersecurity operations,
- Third-party / external systems governance.
- Good understanding of relevant regulations and guidelines, including MAS TRM, BNM RMiT, and broader APAC technology risk expectations.
- Strong analytical skills with the ability to identify control weaknesses, root causes, and systemic delivery constraints.
- Strong written and verbal communication skills, including the ability to prepare management papers and engage senior stakeholders.
- Strong stakeholder management and influencing capability in a complex, matrixed environment.
- High level of professionalism, judgment, and attention to detail.
- Relevant professional certifications such as CISA, CRISC, CISSP, CGEIT, or ITIL.
- Familiarity with ServiceNow, JIRA, or similar governance / workflow / ITSM tools.
More Info
Key Skills
Cybersecurity Operations
Third-party Technology Governance
Privileged Access Governance
Technology Assurance
About Company
Skills:
risk governance , Cloud Migration, Erp, Itil, Cybersecurity, Togaf, automation, Digital Transformation, Cism, It Governance, cloud architect certification, enterprise data analytics platforms, systems reliability, Analytics, Infrastructure, Pmp, AI platform integration, Cissp, security standards
Skills:
data reconciliation , operational readiness , Apis, Vendor management, Technology transformation, Financial management, Project Governance, Migration planning, Risk management, Stakeholder Management, Loyalty rewards platforms
Skills:
MAS Technology Risk Management (TRM) Guidelines, Third Party Risk Management frameworks, Operational resilience, Concentration risk assessments, Outsourcing governance frameworks, ISO certifications, MAS Notice 658, MAS Guidelines on Outsourcing, Reviewing and challenging independent assurance reports and certifications, Technology and cybersecurity assessment, Resilience testing, Security Assessments, SOC reports, Recovery objectives
Skills:
Data Analytics, Employee Engagement, Talent Acquisition, Resource Management, Leadership Development, Operational Excellence, Technology, HR governance, HR risk management, Talent Management, Retention
Skills:
.NET, Github, PostgreSQL, Windows, Datadog, Confluence, Javascript, Terraform, Oracle, Python, AWS, Java, Jfrog Artifactory, Jira, Mssql, Linux, ECS, Splunk, Kubernetes, Ona, VS Code, JetBrains, GitHub Actions, SAST scanning, GitHub Copilot, AI assistants, Xray