About this role
<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><u><b>Job Summary</b></u></H2> </div><div><p>Reporting to the Validation Lead, the Line 1.5 assurance role provides independent, control-focused assurance within Technology. The role evaluates the design and operating effectiveness of controls across technology and processes. It partners closely with First Line control owners, leveraging data-driven and continuous assurance to identify control gaps earlier and strengthen regulatory control alignment.</p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><u><b>Job Responsibilities</b></u></H2> </div><div><p><u>Control Assurance and Testing</u></p> <ul> <li>Perform independent validation of key Technology controls, assessing design and operating effectiveness of controls related to areas such as cybersecurity, IT operations, data governance, change management, outsourcing, and access management.</li> <li>Assess adherence to internal policies, standards, and regulatory requirements (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).</li> <li>Document validation findings and providing clear, actional recommendations.</li> <li>Develop and implement continuous validation use cases to provide more timely control gap identification and reduce reliance on manual testing.</li> </ul> <p><strong> </strong></p> <p><u>Regulatory Compliance</u></p> <ul> <li>Support the interpretation and implementation of regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).</li> </ul> <p><strong> </strong></p> <p><u>Risk Governance, Reporting, and Stakeholder Engagement</u></p> <ul> <li>Prepare validation reports for Technology management and risk committees with clear risk articulation, prioritised recommendations, and target implementation dates.</li> <li>Engage constructively with stakeholders across Line 1, 2, and 3, promoting a strong risk and control culture.</li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><u><b>Job Requirements</b></u></H2> </div><div><ul> <li>Bachelor’s Degree with 5 to 7 years of relevant experience within financial institutes in the areas of Technology Risk Management/ Audit/ Governance, and Data Analytics.</li> <li>Relevant professional certifications such as CISA, CISM, CISSP, CRISC or equivalent.</li> <li>Strong understanding of IT processes such as SDLC, change management, cloud, infrastructure operations, and cybersecurity.</li> <li>Understanding of AI and Generative AI concepts, associated risks, and governance considerations, including model risk, data privacy, security, explainability, bias, accountability, and human oversight.</li> <li>Experience participating in AI governance, technology risk, model risk management, or assurance reviews involving AI or Generative AI solutions.</li> <li>Familiarity with Singapore regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).</li> </ul> <p> </p> <p><strong>Preferred Skills:</strong></p> <ul> <li>Good communication and writing skills, especially in summarising risks and controls clearly for senior stakeholders.</li> <li>Ability to independently conduct reviews, perform control design assessment, process walkthroughs, evidence, and identify root causes.</li> <li>Ability to provide constructive challenges while maintaining a strong relationship with stakeholders and control owners.</li> <li>Independent, detail-oriented, and capable of managing multiple priorities.</li> <li>Familiarity with industry AI governance frameworks and regulatory guidance, such as MAS FEAT Principles, NIST AI Risk Management Framework (AI RMF), or equivalent frameworks will be an advantage.</li> <li>Experience in applying data analytics and automation using BI Tools (such as Power BI, Tableau, QlikView), and Programming/ Scripting Languages (such as SQL, Python, Alteryx) to enhance control testing will be an advantage.</li> </ul></div></div></div>