Apply on
About NETS
The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.
The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 120,000 acceptance points in the country as well as online payments.
Overall Function
The IT Governance Manager is part of the Risk Management line 1defense, working with IT risk owners to ensure controls are effective and managed. The individual will be the primary interface for IT in all IT Audits and Governance matters, supporting the CIO in the response to Audit and MAS queries; and its follow-up action, The role is to also to Define, Formulate and Implement IT policies, processes and procedures for Technology division to ensure adherence to organization policies, statutory regulatory and standards. This role works closely with second and third lines-of-defense and acting as an advisor to the IT stakeholders on IT risk matters.
Primary Responsibilities
IT Risk and Process Compliance
- Formulate, develop and execute policies, processes and procedures to facilitate effective IT and cyber related-risk Process and Control arising from Audit Findings or Process improvement maturity.
- Responsible for the management of testing and enforcement of these processes
- Advise on sound IT and cyber risk management matters, changes to MAS guidelines and notices, through timely updates to Senior Management
- Proactively engage in establishing IT Risk awareness within Technology aligning with the organization risk posture
- Partner and work with internal stakeholders to review, identify, streamline and implement process improvements with regards to IT and cyber risk management
- Reference to TRM, Cyber Hygiene guidelines and notices to assess risk and gaps, and work with Line 2 and Security to improve policies and processes to mitigate risks, minimize their impact to operation.
- Communicate and provide guidance of new IT risk–related policies and standards to relevant stakeholders.
- Ability to innovate and strategize as required.
IT Audit Management
Manage IT risk-related audits, regulatory inspections. Review the audit findings with key stakeholders to determine audit findings root cause, formulate action plans accordingly and verify remedial solutions for closure.
Acts as the 1st quality assurance gate for all responses to IT audits, risk and compliance activities.
Primary point of contact for IT audits, Risk and Compliance activities and providing support to business audits that has IT involvement.
Manage IT audit lifecycle from start to end (eg kick off meeting, RFI, fieldwork, reporting and closure of audit findings) [SS6]
Requirements
- Minimum 8 years of experience in risk with at least 5 years of experience specifically handling IT audits, risk and compliance, in an IT control function (preferably from financial/banking/payment industry)
- Open to candidates with experience in IT governance, IT audit, IT regulatory compliance who are keen to explore a career in IT risk management.
- Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard)
- Experience in facing external auditors and statutory regulator such as MAS
- Strong writing, communication and inter‐personal skills
- Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
