IT Vendor Risk Management Analyst

2 days ago


Singapore Tech Grid Asia Full time $90,000 - $120,000 per year

About the role

On behalf of our client, we are seeking a highly motivated and detail-oriented IT Vendor Risk Management Analyst to join the team. This role is crucial for protecting the organization by identifying, assessing, mitigating, and monitoring risks associated with the use of third-party IT vendors and service providers. The ideal candidate will have a strong background in IT security, compliance, and risk management frameworks.

Key Responsibilities

  • Risk Assessment: Conduct comprehensive due diligence and risk assessments on new and existing IT vendors, including security posture, compliance, financial stability, and operational resilience.
  • Policy and Procedure Development: Develop, maintain, and enforce IT vendor risk management policies, standards, and procedures in alignment with regulatory requirements and industry best practices.
  • Contract Review: Collaborate with legal and procurement teams to review and negotiate vendor contracts, ensuring appropriate security and compliance clauses, Service Level Agreements (SLAs), and right-to-audit provisions are included.
  • Ongoing Monitoring: Implement and manage a continuous monitoring program for critical vendors, tracking performance, security controls, and adherence to contractual obligations.
  • Reporting: Prepare and present regular reports to senior management on the overall IT vendor risk landscape, identified risks, and mitigation efforts.
  • Remediation Tracking: Track, manage, and validate vendor remediation plans for identified vulnerabilities or control deficiencies.
  • Stakeholder Collaboration: Serve as a key liaison between internal business units, IT, Legal, Procurement, and external vendors on all risk-related matters.

Qualifications Required:

  • Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
  • Minimum of 5 years of experience in IT risk management, vendor risk management (VRM), third-party risk management (TPRM), IT audit, or IT security, within Banking/ Financial Services/ Fintech sector
  • Relevant certifications in CISA, CISM, CISSP, CRISC will be a plus.
  • Proven ability to conduct detailed risk analysis, strong analytical and problem-solving skills, and excellent written and verbal communication abilities.


  • Singapore JBA Risk Management Full time

    **Job description** **Job title** Assistant Catastrophe Risk Analyst **Intro** We are looking for an individual to join us and support the delivery of Catastrophe Risk solutions within our Singapore team, you will be able to analyse and validate probabilistic results with our CAT models, and work with a dynamic range of clients and experienced...


  • Singapore Tech Grid Asia Full time

    About the role On behalf of our client, we are seeking a highly motivated and detail-oriented IT Vendor Risk Management Analyst to join the team. This role is crucial for protecting the organization by identifying, assessing, mitigating, and monitoring risks associated with the use of third-party IT vendors and service providers. The ideal candidate will...


  • Singapore NETS Full time

    Responsibilities Oversee IT vendor management and manage risks associated with IT vendors Manage contracting processes and costs, ensuring all vendor agreements align with BCS’s focus, budget, and regulatory requirements Track and analyze vendor performance against defined KPIs and SLAs, ensuring vendors fulfil performance standards; conduct period review...


  • Singapore NETS Full time

    Responsibilities Oversee IT vendor management and manage risks associated with IT vendors Manage contracting processes and costs, ensuring all vendor agreements align with BCS's focus, budget, and regulatory requirements Track and analyze vendor performance against defined KPIs and SLAs, ensuring vendors fulfil performance standards; conduct period review...


  • Singapore Risk Management Institute Full time

    **Posting Start Date**:30/04/2025 **About RMI** Risk Management Institute (RMI) aims to be a world-class centre in risk management through research, education and training. It strives to become a locally, regional and globally recognized knowledge center in financial risk management where scholars, regulators, and industry professionals gather to advance...

  • IT Grc

    1 week ago


    Singapore CAREERALLY PTE. LTD. Full time

    We are seeking an experienced **IT Vendor Risk Specialist**to oversee vendor relationships, contracts, and performance for mission-critical systems. You will play a key role in managing risks, ensuring regulatory compliance, and driving continuous improvements in vendor governance processes. **Key Responsibilities**: - Oversee IT vendor relationships,...


  • Singapore Careerally Full time $13,000 per year

    Key Highlights:Permanent PositionOpportunity to work with a dynamic, industry-leading companyUp to $13,000 + Bonus + comprehensive benefits packageWe are looking for an experienced IT Vendor Risk Specialist to strengthen our client's 2nd line of defense. This role is pivotal in managing third-party IT risks, ensuring compliance with regulatory...


  • Singapore ASM Full time

    We’re not like most. We don’t just overcome obstacles - we don’t see them. Instead, we see the potential in every person, and every situation. We don’t wait for opportunity to appear - we create it. Meet ASM. A company that has been searching for people just like you._ **Who is ASM?** ASM is a leading, global supplier of semiconductor wafer...


  • Singapore Manulife Full time

    **_We are a _**_leading financial services provider committed to making decisions easier and lives better for our customers and _**_colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. _**_To help us stand out, we help you step up, because when colleagues are healthy,...


  • Singapore Stripe Full time $120,000 - $180,000 per year

    Who we are About StripeStripe is a financial infrastructure platform for businesses. Millions of companies - from the world's largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of...