Own and maintain the IT risk register, drive regular risk identification with IT service, platform, and project owners, and ensure appropriate assessment, treatment plans, and timely closure of risk actions
Liaise with the Monetary Authority of Singapore (MAS) and other relevant regulators on routine regulatory matters, submissions, and enquiries as required.
Perform regular investment risk analysis, including, but not limited to, derivative sensitivities such as Greeks and DV01, tracking error analysis, collateral sufficiency, liquidity risk, Value-at-Risk and credit risk.
5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
Governance and Entity Management: Maintain the firm’s "source of truth," including corporate governance records such as resolutions and Accounting and Corporate Regulatory Authority (ACRA) filings for the firm and its funds/SPVs, and working with their corporate secretarial service providers to ensure their obligations are met with methodical consistency.
Governance and Entity Management: Maintain the firm's "source of truth," including corporate governance records such as resolutions and Accounting and Corporate Regulatory Authority (ACRA) filings for the firm and its funds/SPVs, and working with their corporate secretarial service providers to ensure their obligations are met with methodical consistency