Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 10 days ago

Technology Risk & Third-Party Risk Analyst

MyCareersFuture94,028 open roles

Pay
SGD 6,000 – SGD 9,000 a month
Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowTechnology Risk & Third-Party Risk AnalystMyCareersFuture · Singapore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on MyCareersFuture's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.4%3 days
  3. 7.8%7 days
  4. 14.3%14 days
  5. 33.7%30 days
This job: posted 10 days ago

The posting

We are seeking a Technology Risk & Third-Party Risk Analyst to assess and manage the technology, information security, cybersecurity, and outsourcing risks associated with external vendors and service providers. The successful candidate will conduct vendor due diligence, security and control assessments, identify control gaps, and work with internal stakeholders and third parties to ensure risks are appropriately documented, monitored, and remediated.

Key Responsibilities:

  • Conduct third-party and vendor risk assessments, including initial due diligence, periodic reviews, and ongoing monitoring.
  • Assess vendors’ information security, cybersecurity, technology, cloud, data protection, business continuity, and outsourcing controls.
  • Review security questionnaires, supporting documents, audit reports, certifications, policies, penetration-test reports, and other evidence provided by vendors.
  • Perform control gap assessments and evaluate the adequacy and effectiveness of vendors’ risk-management controls.
  • Identify, document, and evaluate risks arising from third-party services, technology platforms, cloud environments, and outsourcing arrangements.
  • Prepare clear assessment reports detailing identified risks, control gaps, recommendations, and remediation requirements.
  • Work with vendors and internal stakeholders to develop and track remediation plans through to closure.
  • Escalate material risks, overdue remediation actions, and control weaknesses to the relevant stakeholders and management.
  • Maintain accurate third-party risk records, risk ratings, assessment results, supporting evidence, and remediation status.
  • Support the development and improvement of third-party risk-management policies, procedures, assessment methodologies, and reporting standards.
  • Collaborate with Information Security, Technology Risk, Compliance, Procurement, Legal, Audit, and business teams.
  • Support regulatory reviews, internal audits, and external audits relating to third-party, outsourcing, technology, and cybersecurity risks.
  • Monitor relevant regulatory and industry developments and incorporate applicable requirements into the assessment process.

Requirements:

Relevant experience in one or more of the following areas:

  1. Third-Party Risk Management
  2. Vendor Risk Management or Vendor Due Diligence
  3. Technology Risk
  4. Information Security or Cybersecurity
  5. IT Risk, IT Controls, or IT Audit
  • Practical experience conducting security assessments, control reviews, or control gap assessments.
  • Good understanding of third-party, vendor, and outsourcing risk-management principles.
  • Familiarity with cybersecurity and cloud security risks and controls.
  • Ability to evaluate control evidence, identify weaknesses, and recommend practical remediation measures.
  • Familiarity with the Monetary Authority of Singapore’s regulatory expectations and technology risk requirements is preferred.
  • Strong analytical, problem-solving, documentation, and report-writing skills.
  • Strong stakeholder-management and communication skills, with the ability to engage both technical and non-technical stakeholders.
  • Ability to manage multiple assessments, priorities, and remediation activities simultaneously.
  • High attention to detail and the ability to exercise sound risk-based judgement.

Preferred Qualifications:

  • Degree or diploma in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or a related discipline.
  • Relevant certifications such as CISA, CISM, CRISC, CISSP, CCSP, ISO 27001, or equivalent would be advantageous.
  • Experience within banking, financial services, insurance, or another regulated industry would be an advantage.
  • Knowledge of recognised frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CSA CCM, SOC 2, or COBIT would be beneficial.

To apply,simply click the "Apply" button or send your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against MyCareersFuture's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on MyCareersFuture's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    MyCareersFuture's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.