Executive/Senior Executive, IT Risk

Executive / Senior Executive, IT Risk & Compliance (CRIS HQ)Overview The Consortium for Clinical Research and Innovation, Singapore (CRIS) brings together six national R&D, clinical translation and service programmes to advance clinical research and innovation for Singapore, and establish important capabilities for a future‐ready healthcare system. Business entities under CRIS include: Singapore Clinical Research Institute (SCRI)Advanced Cell Therapy and Research Institute, Singapore (ACTRIS)Cardiovascular Disease National Collaborative Enterprise (CADENCE)CRIS makes a positive difference to Singapore patients and researchers by ensuring that these clinical research platforms and programmes are at the cutting edge of capability development and innovation. We want you as if you are passionate about clinical trials and research. What you will be working on We are seeking a highly motivated individual to join our CIO Office. The ideal candidate is passionate about IT Governance, Risk and Compliance, with a solid understanding of Information Technology/Security, Cloud Implementation Methodologies, IT risk assessment and IT security compliance review. Key Responsibilities Conduct comprehensive due diligence, compliance evaluations, gap analyses, and risk assessments on services and solutions provided by third‐party vendors. Analyze, prioritise and classifiy risks. Draft risk scenarios and provide recommendation of risk treatment plans. Perform regular IT security and cyber risk assessments to monitor compliance with IT security and cybersecurity policies, ensuring effective and timely implementation and management of IT project risk assessment. Collaborate with internal stakeholders to ensure alignment with governance requirements and facilitate audits and reviews. Collaborate closely with procurement teams to develop Request for Quotations (RFQ) and Request for Proposals (RFP), establish evaluation criteria, and negotiate contracts and agreements with third‐party vendors effectively. Coordinate with internal teams and external partners to investigate security incidents and implement remediation measures. Facilitate audit initiatives by collaborating effectively with both Internal and External Auditors to ensure comprehensive support and communication. Develop and maintain policies and processes related to IT governance and compliance. Provide security consultancy, technical guidance, expertise, solutions, and education to stakeholders. Support security awareness initiatives and ensure implementation of key cyber hygiene controls. Provide and support IT solutions, infrastructure, policy and procedure that will improve operation effectiveness and organisation success. Requirements A Diploma or Bachelor's Degree in Information Technology (IT), Information Security (IS), Cybersecurity, or a related field. 2-3 years of experience in IT/IS, IT Governance, Risk and Compliance (GRC), or Cybersecurity roles. Experience with IT Governance, Risk and Compliance activities. Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods. Familiar with Cloud Service Models (SaaS, IaaS, PaaS) and Cloud Security. Knowledge of Medical Device/Operating Technology. Excellent analytical and problem‐solving skills. Excellent communication and interpersonal skills, with a proven ability to collaborate effectively with diverse stakeholders. Ability to work independently and as part of a team. Highly driven and eager to learn. What you need to know Successful candidate will be offered a 3‐year contract, renewable. We regret that only shortlisted candidates will be contacted. Contact information For more information about CRIS and the Business Entities, visit our websites below: CRIS – SCRI – NHIC – ACTRIS – PRECISE – STCC – CADENCE – Seniority level Mid‐Senior level Employment type Full‐time Job function Health Care Provider, Analyst, and Information Technology Industries Hospitals and Health Care, Research Services, and Security and Investigations #J-18808-Ljbffr