Manager, Technology Risk Management
Read straight from Great Eastern's careers page, verified 3d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Typefull-time
SenioritySenior
Experience5+ yrs
DepartmentTechnology Risk Management
Company size10,000+ people
First seenOct 18, 2026 · 2w ago
Verified live3d ago
At a glanceSummarised by Seekless from the posting.
Possess a recognised Degree in Computer Science, Information System or related disciplines
Relevant certifications such as CISA, CISM, CRISC
Good risk identification and management skills
Ability to manage, motivate and lead support personnel
Ability to manage multiple projects/tasks with given deadlines
Possess strong analytical, problem-solving skills
Team player and performs well under pressure
Excellent people & project management
Excellent verbal and written communications skills
Good appreciation of IT infrastructure and systems
Minimum 5 years experience in IT related environment including risk, security, audit and control related functions
Good IT related knowledge in risks management and mitigating controls
Good IT related knowledge in investigation techniques
Good IT related knowledge in cyber security and controls
Good IT related knowledge in regulatory requirements
Good IT related knowledge in policies and best IT practices, methodologies and benchmarks
Good IT related knowledge in AI risk & controls
Champion and embody our Core Values in everyday tasks and interactions
Demonstrate high level of integrity and accountability
Take initiative to drive improvements and embrace change
Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively
Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/risks to safeguard our company proactively
About the role
The Manager, Technology Risk Management will manage IT risks identification, mitigation and
monitoring, develop/review Technology related frameworks, policies and guidelines and conduct
related training and awareness programs.
Responsibilities
•
Governance and Policy Management
-Assist in development/review of core Technology frameworks, policies and guidelines.
-Proactively identify and incorporate relevant requirements from regulatory guidelines/Acts to ensure compliance.
•
Technology Risk Management
-Facilitate Technology risk management to ensure effective risk identification, mitigation and monitoring
-In particular, to review management of Technology related risk and threats and recommend relevant monitoring and mitigating controls
-Identify emerging Technology trends, risks and threats
•
Reviews and Monitoring
-Perform review of functions to:
o Determine effectiveness and completeness of technology risk identification, mitigation and monitoring
o Assess the implementation and compliance to regulatory guidelines, frameworks and policies. This will include reviews of Outsourced Service Providers (OSPs) and other third party vendors
o Review adequacy and effectiveness of IT contingency and disaster recovery strategies and plans
o Prepare relevant reports and table the same at relevant management or board committee meetings
•
Participation in IT Projects and Group initiatives
-Participate or perform reviews of IT projects to ensure that risks are accurately identified and effectively managed
-Provide advise on technology risks, frameworks, policies and regulatory requirements.
-Involvement in TRM related projects/program and initiatives by IT, BU, Group or regulator.
•
Reporting
-Prepare dashboard reporting on the material technology, information and cyber risk matters, including key risk indicators to the Board and Senior Management.
-Perform oversight over the IT incident management, reporting and testing.
•
Risk Awareness
-Promote security awareness via education and awareness on technology risks, cyber security and data protection for directors, staff, agents and service providers.
•
Review and appraise Department Risk Officers and Department Compliance Officers
-Determine effectiveness of implementation and compliance to laws and regulations and policies.
-Ensure that frameworks, policies and guidelines are reviewed timely.
-Provide guidance and training to DROs/DCOs, vendors and agents on technology-related subjects.
-Promote risk awareness for the company.
-Takes accountability in considering business and regulatory compliance risks and takes appropriate steps to mitigate the risks.
-Maintains awareness of industry trends on regulatory compliance, emerging threats and technologies in order to understand the risk and better safeguard the company.
-Highlights any potential concerns /risks and proactively shares best risk management practices.
Requirements
•
Possess a recognised Degree in Computer Science, Information System or related disciplines
•
Relevant certifications such as CISA, CISM, CRISC
•
Good risk identification and management skills
•
Ability to manage, motivate and lead support personnel
•
Ability to manage multiple projects/tasks with given deadlines
•
Possess strong analytical, problem-solving skills
•
Team player and performs well under pressure
•
Excellent people & project management
•
Excellent verbal and written communications skills
•
Good appreciation of IT infrastructure and systems
•
Minimum 5 years experience in IT related environment including risk, security, audit and control related functions
•
Good IT related knowledge in the following areas;
-Risks management and mitigating controls
-Investigation techniques
-Cyber Security and controls
-Regulatory requirements
-Policies and best IT practices, methodologies and benchmarks
-AI risk & controls
•
Champion and embody our Core Values in everyday tasks and interactions.
•
Demonstrate high level of integrity and accountability.
•
Take initiative to drive improvements and embrace change.
•
Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.
•
Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.
About the company
Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei. The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of “AA-” by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern’s asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia. Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.