Head of Technology Risk and Governance, Financial Services

Head of Technology Risk and Governance, Financial Services Direct message the job poster from Kerry Consulting The Head of Technology Risk & Governance will lead the first line of defence (1LOD) risk management function within Group Technology. The role is responsible for establishing and maintaining effective risk governance across technology domains, including cloud, infrastructure, applications, and emerging technologies, ensuring that risks are proactively identified, assessed, and managed in alignment with the firm's risk appetite, regulatory obligations, and business strategy. This individual will partner closely with engineering, operations, and cybersecurity teams to embed robust risk and control practices into the technology lifecycle (SDLC), while maintaining strong collaboration with the 2LOD and 3LOD to ensure transparency and accountability across the risk framework. Key Responsibilities Develop and maintain the Group Technology risk management framework, aligning with enterprise risk policies and global regulatory expectations (e.g., MAS TRM, ISO 27001, NIST, COBIT). Lead the establishment of governance structures for technology risk oversight, including risk committees, control self-assessments, and issue management. Define and monitor risk appetite, key risk indicators (KRIs), and metrics for technology and operational domains. Cloud & Emerging Technology Risk Oversight Oversee risk management for cloud transformation initiatives across AWS, Azure, GCP, and on-premise hybrid environments. Evaluate and challenge design and implementation of cloud security controls, identity management, data protection, and resilience frameworks. Ensure alignment of cloud risk governance with DevSecOps, CI/CD, and modern SDLC practices. IT Governance & Control Effectiveness Drive consistency and accountability in control design, execution, and testing across infrastructure, applications, and operations. Lead periodic technology risk assessments, thematic reviews, and control assurance exercises. Oversee policy and standards development for IT governance, service continuity, change management, and vendor risk. Regulatory Compliance & Audit Management Ensure adherence to regulatory frameworks such as MAS TRM, PDPA, and relevant data protection and cybersecurity guidelines. Coordinate with Compliance, Audit, and 2LOD Risk teams on reviews, inspections, and remediation tracking. Represent Group Technology in risk and audit committees, ensuring accurate and timely reporting of risk posture. Leadership, Engagement & Culture Lead and develop a team of technology risk professionals, fostering a proactive and collaborative risk culture. Partner with senior technology leaders to ensure risk considerations are integrated into decision‑making and project governance. Deliver training and awareness programs to enhance risk and control ownership across engineering teams. Requirements Bachelor's degree in Information Technology, Computer Science, or related discipline; Master's preferred. 15 years of relevant experience in technology risk, IT governance, or audit, with at least 5 years in a leadership capacity. Strong understanding of IT infrastructure, cloud technologies (AWS, Azure, GCP), SDLC, DevSecOps, and emerging technologies. Deep knowledge of regulatory frameworks (MAS TRM, BNM RMiT, ISO 27001, NIST, COBIT). Proven ability to operate effectively in a first line of defence function, balancing governance and enablement. Excellent stakeholder management, influencing, and communication skills, with experience engaging senior executives and regulators. To apply If you're interested to apply or find out more, please share your CV or reach out to Chen Yi at cy@kerryconsulting.com for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified. Reg: R1876389 Lic: 16S8060 J-18808-Ljbffr

Location: Singapore, Singapore, SG

Posted Date: 11/1/2025