Senior IT Governance Specialist

BCS is NETS’ wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.

Primary Responsibilities 

 IT Risk and Process Compliance

• Formulate, develop and execute policies, processes and procedures to facilitate effective IT and cyber related-risk Process and Control arising from Audit Findings or Process improvement maturity. 
• Responsible for the management of testing and enforcement of these processes 
• Advise on sound IT and cyber risk management matters, changes to MAS guidelines and notices, through timely updates to Senior Management
• Proactively engage in establishing IT Risk awareness within Technology aligning with the organization risk posture
• Partner and work with internal stakeholders to review, identify, streamline and implement process improvements with regards to IT and cyber risk management
• Reference to TRM, Cyber Hygiene guidelines and notices to assess risk and gaps , and work with Line 2 and Security to improve policies and processes to mitigate risks, minimize their impact to operations. 
• Communicate and provide guidance of new IT policies and standards to relevant stakeholders.
• Ability to innovate and strategize as required. 

IT Audit Management

• Manage IT related audits, regulatory inspections. 

• Review the audit findings with key stakeholders to determine audit findings root cause, formulate action plans accordingly and verify remedial solutions for closure. Acts as the 1st quality assurance gate for all responses to IT audits, risk and compliance activities. 
• Primary point of contact for IT audits, Risk and Compliance activities and providing support to business audits that has IT involvement. 
• Manage, front and internally co-ordinate for all types of IT audit lifecycle from start to end (eg kick off meeting, RFI, fieldwork, reporting and closure of audit findings) 

Requirements

• Minimum 12 years of experience in risk with at least 8 years of relevant experience specifically handling IT audits, risk and compliance, in a IT control function (preferably from financial/banking/payment industry) 
• Open to candidates with experience in IT governance, IT audit, IT regulatory compliance who are keen to explore a career in IT risk management Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard) 
• Experience in facing external auditors and statutory regulator such as MAS, Strong writing, communication and inter‐personal skills 
• Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses

Banking Computer Services Pte Ltd (a subsidiary of Network for Electronic Transfers (Singapore) Pte Ltd)