Tech Risk and Control Specialist (Onsite opportunity @ Singapore)

We are looking for Technology Risk & Controls Specialist @ Singapore

Job Description :

About company :

Smart IMS Inc is providing Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to its customers in the Americas, Europe, Middle East, and Asia-Pacific. Smart IMS, a Microsoft Gold Certified Partner, Oracle Platinum Partner, AWS MSP Partner is a trusted technology and business partner delivering technology-enabled solutions to help companies grow their businesses and compete globally.

Work Location : Singapore(1 year renewable contract under SmartIMS Payroll)

Technology Risk & Controls Specialist

• Second-line technology risk • Global investment banking client**

## Where you'll sit

You'll join the **APAC Risk & Controls function** of a top-tier global investment bank, working alongside Application Managers, enterprise control functions and business COOs across the corporate and investment banking technology estate.

This is a second-line seat. You're not writing the code and you're not writing the audit report you're the person who makes sure control gaps get found, owned, and closed before a regulator finds them for you.

What you'll actually do

**Own the risk cycle**

- Run risk assessment and RCSA cycles end to end across a portfolio of applications

- Drive issue identification, remediation planning, and validation of closure

- Track, monitor and escalate technology risk issues to senior management using the bank's established tooling and procedures

**Handle regulators and auditors**

- Assess regulatory change across APAC — MAS, HKMA, RBI, OJK, CBRC and others — and translate it into concrete technology and operational impact

- Lead the response to internal audits, external audits, regulatory exams and clearing inquiries, coordinating across application groups, risk leads and Global Information Security

- Support business and process owners in remediating the highest-severity findings, including audit issues, self-identified issues, compliance-identified issues and regulatory issues

**Run the control programs**

- Quality assurance testing over application controls

- Business continuity planning and testing for in-scope applications

- Sustainability program delivery and adoption of new risk tooling (including JIRA-based risk workflows)

**Influence people who outrank you**

- Manage senior stakeholder communication and reporting

- Develop and socialise risk mitigation strategies before they become mandates

- Champion an "identify, escalate, debate" culture rather than a tick-box one

- Find and fix the parts of the risk process that are slower than they need to be

## What we're looking for

**Essential**

- 4–6+ years in technology risk, technology audit, IT compliance or a control function, within banking or financial services

- Hands-on experience executing risk initiatives — not just coordinating them

- Application control testing experience

- Bachelor's degree (IT, Computer Science, Information Systems, Accounting, Business or a related discipline)

- The confidence to voice an unpopular view to a senior stakeholder and hold it with evidence

**Strongly preferred**

- Exposure to the payments domain — cards, clearing, cross-border, or payment infrastructure

- Working knowledge of APAC regulatory frameworks, particularly MAS Technology Risk Management guidelines

- Experience leading programs that proactively surface regulatory exposure ahead of examination

- CISA, CRISC, CISM or CIA

## Who this role suits

You'll do well here if you're coming from **Big 4 IT audit or risk assurance** and want to own outcomes instead of handing over a report, or from a **bank internal audit or tech risk team** and want broader regional scope and real regulatory exposure.

It's probably not the right fit if you're looking for a hands-on engineering or security architecture role — this is governance, assessment and influence, not build.

## What we offer

- Direct exposure to one of the world's largest investment banks and its APAC regulatory landscape

- Regional scope across multiple markets and regulators