Job Summary:

As a Senior Technology Risk Analyst,  you will support the Tech Risk Manager in all risk & compliance related activities for SPH Media Technology division. You will work with our stakeholders (the Heads and nominated Subject Matter Experts across the Technology Division) and Cybersecurity team to manage all IT risks and support process improvement activities.

Job Description:

• supporting stakeholders in understanding the risk process and risk assessment criteria
• work with key stakeholders to establish compliance with policies & standards, ensuring that identified risks and gaps are adequately addressed and remediated
• Continuously evaluate risk mitigation measures to ensure effectiveness, compliance and adherence to key controls and policies and to support teams on the remediation efforts
• maintaining the division’s risk register
• working with stakeholders to update the risk register to add new risks and ensure existing risks stay relevant tracking and updating risk mitigation & remediation action plans
• managing the policy waiver/exception process
• preparing regular reports on risks, action plans and waiver/exception status
• compiling and analysing risk data to prepare graphs and dashboards for management
• supporting the Tech Risk Manager in risk meetings within Tech and with the organisation’s risk department
• supporting the Tech Risk Manager in the roll out of Risk & Compliance tool for the organisation
• supporting process improvement activities, including creating and updating process documents, especially in SDLC and IT policy areas
• Collaborate with internal and external audit teams, to manage and effect audits from a compliance & point-in-time perspective, to a risk-driven, continuous proactive compliance approach
• Participate in the review and refinement of cybersecurity policies, standards, processes, procedures and guidelines in accordance with cybersecurity best practices

Job requirements:

• Bachelors in Computer Science or Information Technology
• 4+ years of experience in IT Risk or a related role
• Good knowledge of risk management policies, standards, processes, governance model and risk analysis approaches
• Good knowledge of risk management concepts including risk assessments, risk treatment and 3rd party risks
• Good experience in cybersecurity risk management, governance or compliance
• Knowledge of SG regulations such as Cybersecurity Act, MAS TRM Guidelines or PDPA
• Experience with Waterfall and Agile SDLC methodologies
• Good to have experience implementing/using risk management system
• Excellent attention to detail
• Team player, proactive with strong organisational skills
• Strong analytical and data analysis skills
• Excellent written and verbal communication
• CISM, CISSP, CISA or CRISC certification is a plus

Knowledge of cybersecurity management frameworks such as ISO27001, NIST 800-53 is a plus