Cybersecurity & Technology Risk Engineer

We are looking for an experienced Cybersecurity & Technology Risk Engineer to support technology risk management, third-party security assessments, and vendor due diligence activities.

The successful candidate will assess information security and technology risks, review security controls and documentation, identify control gaps, and provide practical recommendations to mitigate risks.

Key Responsibilities

• Conduct third-party, vendor, and outsourcing risk assessments.
• Perform security due diligence and review vendors’ security controls, policies, certifications, and audit reports.
• Assess information security, technology, cloud, compliance, and outsourcing risks.
• Identify control gaps, risks, and areas requiring remediation.
• Prepare clear risk assessment reports, findings, and recommendations.
• Work closely with business, technology, cybersecurity, compliance, and vendor stakeholders.
• Support ongoing technology risk and third-party risk management activities.

Requirements

• Minimum 5 years of experience in Technology Risk, Cybersecurity, Information Security, IT Audit, or Vendor/Third-Party Risk Management.
• Strong understanding of third-party risk management, vendor due diligence, and security assessments.
• Good knowledge of cybersecurity controls, cloud security, and technology/outsourcing risk.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines and MAS Outsourcing Guidelines is preferred.
• Strong analytical, report-writing, documentation, and stakeholder management skills.
• Relevant certifications such as CISSP, CISA, CRISC, CISM, or ISO 27001 are advantageous.

Preferred Background

• Experience in banking, financial services, fintech, or other highly regulated industries is highly desirable.
• Experience in conducting vendor security assessments or third-party technology risk reviews will be an advantage.