VP, Information

VP, Information & Technology Risk Manager, COO's Office role at GIC.

GIC is one of the world's largest sovereign wealth funds with over 2,000 employees across 11 locations. We invest in more than 40 countries and seek to be a tech-driven, global, long-term investment firm. The COO's Office supports the COO to streamline operations and align them with strategic goals, working with the Heads of Departments and stakeholders across GIC to achieve operational excellence. The Information & Technology Risk Management function protects the firm's IT assets and data from external threats and operational risks while enabling secure digital transformation.

• Risk Assessment and Management: Conduct comprehensive risk assessments for technology-related areas, including cloud security, API security, SDLC, and network security. Develop and implement risk management frameworks and procedures. Monitor and report on technology risk exposures and mitigation efforts.
• Oversight and Governance: Provide independent oversight of technology risk management activities conducted by the first line of defense. Ensure compliance with regulatory requirements and internal policies. Review and challenge risk assessments, controls, and mitigation strategies.
• Collaboration and Communication: Work closely with IT, cybersecurity, and other teams to ensure effective risk management practices. Communicate risk findings and recommendations to senior management and the board. Facilitate risk awareness and training programs.
• Incident Management: Oversee the response to technology-related incidents and breaches. Conduct post-incident reviews and ensure lessons learned are integrated into risk management practices.
• Continuous Improvement: Stay updated on emerging technology risks and industry best practices. Continuously improve risk management frameworks and controls. Lead initiatives to enhance the organization's technology risk posture.

• 8-10 years of experience, preferably in technology risk management within risk control and audit in IT infrastructure and cybersecurity.
• Experience in identifying, assessing, and advising on technology risks and controls in a cross-disciplinary technology environment, preferably in a financial institution.
• Strong understanding of regulations from authorities such as MAS, RBI, HKMA; familiarity with ISO, NIST, ITIL, and cybersecurity frameworks.
• Exposure to Agile methodologies, DevSecOps, cybersecurity, network security, API security, cloud security and related technologies.
• Excellent organizational, problem-solving, interpersonal, and operational skills to drive IT risk agenda within IT functions.
• Strong communication skills with the ability to engage IT teams, senior management, and staff to drive IT risk mitigation initiatives.
• Interest in staying updated on regulations, emerging technologies, vulnerabilities, and IT risk trends to remain relevant in a rapidly evolving landscape.

Work at the Point of Impact: Be forward-looking to help GIC become the Leading Global Long-term Investor. Join a diverse, ambitious, agile team and be empowered to push boundaries and share your views. Align with PRIME Values: Prudence, Respect, Integrity, Merit and Excellence.

Flexibility at GIC: Offices are in-person for four days per week with the option to work from home on other days as needed.

Equal Opportunity: GIC is an equal opportunity employer. An inclusive environment yields exceptional contribution.

Seniority level: Mid-Senior level

Employment type: Full-time

Job function: Information Technology

Industries: Investment Management and Financial Services

Learn more about our COO's Office: