AVP, Risk & Control Officer - Application Risk Oversight, COO Office

at  GIC Investment

Location:Singapore, SG
Job Function: Chief Operating Officer’s Office
Job Type: Permanent
Req ID: 16204
GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

WHAT IMPACT CAN YOU MAKE IN THIS ROLE?

You will be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports GIC’s vision of being a tech-driven, global, long-term investment firm.

WHAT WILL YOU DO AS A AVP, RISK & CONTROL OFFICER - INFRASTRUCTURE RISK OVERSIGHT?

• Drive compliance with operational risk processes and manage technology, information, and cybersecurity risks within various business areas, in line with the firm’s risk appetite and regulatory requirements
• Plan and conduct technology, information, and cybersecurity gap assessment to identify possible risks at each stage of the Secure Software Development Lifecycle (SSDLC), evaluating relevant mitigating controls and measuring residual risk
• Collaborate with Business Partner & Solutions (BPS), Infrastructure and Platform Services (IPS) and other teams across the firm so as to drive compliance with technology, information and cybersecurity policies and standards
• Monitor and report on the effectiveness of technology, information, and cybersecurity risk controls, identifying any control weaknesses and recommending improvements
• Facilitate risk and control awareness training on technology, information, and cybersecurity across the firm to ensure understanding and compliance, driving initiatives to promote a risk-based approach to application development within respective business areas
• Prepare regular risk and control reports for senior management, highlighting key audit, risks, and control issues
• Coordinate ITRM and third-line/Internal Audit risk functions to ensure a unified approach to audit & risk management

WHAT QUALIFICATIONS OR SKILLS SHOULD YOU POSSESS IN THIS ROLE?

• Bachelor’s Degree in Information Technology, Computer Engineering or equivalent
• At least 4 years of relevant experience preferably in financial services or asset management industries, with experience in Cyber Security or Information Security
• Relevant professional certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or Certified Information Security Manager (CISM) are highly desirable
• Familiarity with Secure Software Development Lifecycle (SSDLC) processes and practices
• Knowledge of relevant regulatory requirements and industry standards for technology and cybersecurity
• Experience in conducting risk assessments and thematic reviews
• Strong understanding of technology, information, and cybersecurity risks and controls
• Excellent collaboration skills to work effectively with various teams across the organization
• Strong reporting skills, with the ability to monitor and report on the effectiveness of risk controls
• Ability to prepare clear and concise risk and control reports for senior management