Job Description

Company: 6255 UOB Innovation Hub 2 Sdn Bhd

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values – Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

Job Description

About UOB

United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of around 500 offices in 19 countries and territories in Asia Pacific, Europe and North America. UOB's purpose is to build the future of ASEAN. Our purpose guides The UOB Way – that defines our unique culture and belief system, anchored on our values of being Honourable, Enterprising, United and Committed, and our people philosophy of Care, Growth and Trust.

About The Department

UOB Innovation Hub 2 (InnoHub2) is a UOB-wholly owned subsidiary and a Centre of Excellence based in Malaysia, providing Group Business Services (GBS) to support the UOB Group. Started in 2021 with technology application design, development and support, InnoHub2 is expanding beyond technology services to deliver other business services to support the Bank’s growth ambition. We are looking for talented and motivated individuals to be part of the pioneer team spearheading the development and delivery of the new services.

As part of the InnoHub2 team, you will have the opportunity to work on Group initiatives and gain regional business exposure. We are dynamic, passionate and purposeful about delivering trusted financial solutions that enables business growth. An exciting career progression with varied opportunities awaits you at IH2. Come grow your career with us.

The Technology Risk Office (TRO) is responsible for strengthening technology risk governance through effective oversight, risk measurement, reporting, and management engagement. The function provides timely risk insights, promotes accountability, and supports informed decision-making to enhance technology resilience and control effectiveness.

The incumbent will support the TRO in driving transparency, consistency, and accountability in the identification, measurement, monitoring, and reporting of technology risk across Group Technology & Operations (GTO). Working closely with Technology, Information Security, Technology Risk Management, Internal Audit, and other stakeholders, the role will provide management with meaningful risk insights, support governance forums, and contribute to the continual enhancement of technology risk oversight and governance practices.

The role will play a key part in consolidating and analysing technology risk information, producing management reporting, and supporting governance forums to facilitate effective oversight of technology risk across GTO.

Job Responsibilities

Technology Risk Governance and Committees

• Coordinate and support technology risk governance forums, including the Technology Risk Review (TRR).
• Prepare governance materials, meeting minutes, action logs, risk summaries, management presentations, and discussion papers to support the effective operation of TRR and other governance forums.
• Monitor key technology risk themes, emerging risks, major incidents, and remediation activities requiring management attention.
• Track and follow up on agreed actions arising from governance forums to support timely remediation and closure.
• Contribute to the continuous improvement of technology risk processes, governance practices, and management oversight mechanisms across GTO.
• Promote consistency and transparency in technology risk management practices across GTO.

Technology Risk Reporting and Analytics

• Develop, maintain, and enhance technology risk dashboards, Key Risk Indicators (KRIs), Key Operational Risk Indicators (KORIs), and management reporting.
• Gather, validate, consolidate, and analyse technology risk data from multiple sources to identify trends, emerging risks, control weaknesses, and areas requiring management attention.
• Consolidate information from incidents, risk indicators, audit findings, regulatory actions, and remediation activities to develop meaningful management insights and reporting.
• Develop executive summaries, management commentary, and risk insights on technology risk posture, key themes, and emerging concerns.
• Monitor performance against approved thresholds and coordinate follow-up, escalation, and reporting activities, where required.
• Drive improvements in reporting methodologies, data quality, reporting accuracy, and governance controls.
• Identify opportunities to improve reporting automation, efficiency, and transparency.

Technology and Cybersecurity Risk Oversight

• Maintain awareness of key technology and cybersecurity risk domains, including technology resilience, infrastructure, cloud security, application security, vulnerability management, technology obsolescence, third-party risk management, and control effectiveness.
• Analyse technology and cybersecurity risk information to identify recurring issues, emerging concerns, and systemic risk themes.
• Engage Technology and Information Security stakeholders to understand risk drivers, remediation plans, and residual risk exposures.
• Translate technical and cybersecurity-related matters into clear and actionable management insights.
• Regulatory, Audit and Assurance Management
• Coordinate regulatory, audit, assurance, and independent review activities relating to technology risk oversight and reporting.
• Manage information requests, evidence collection, stakeholder responses, and management reporting.
• Track and monitor remediation activities arising from regulatory reviews, audits, assurance reviews, and management actions.
• Prepare management updates and governance reporting relating to audit, regulatory, and assurance matters.

Continuous Improvement and Strategic Initiatives

• Contribute to the development and maintenance of technology risk frameworks, methodologies, procedures, and standards.
• Support initiatives to enhance technology risk reporting, oversight processes, and governance effectiveness.
• Identify opportunities to improve reporting efficiency, automation, data quality, and risk transparency.
• Contribute to the ongoing development and maturation of the TRO and technology risk management practices across GTO.

Job Requirements

Education

• Degree in Information Technology, Information Security, Computer Science, Engineering, Risk Management, Business, or a related discipline.
• Professional certifications such as CISA, CRISC, CISSP, CISM, CGEIT, or equivalent would be advantageous.

Experience

• Relevant experience in Technology Risk Management, Information Security Governance, Technology Governance, Internal Audit, Risk Reporting, or related disciplines, preferably within financial services or other highly regulated industries.
• Experience supporting governance committees, management forums, regulatory engagements, or audit activities.
• Experience in management reporting, dashboards, KRIs, risk analytics, and data-driven reporting.
• Experience working with Technology, Information Security, Risk Management, Internal Audit, and business stakeholders.

Technical Knowledge

• Possess a sound understanding of technology and cybersecurity risk concepts, including:
• Technology risk management and governance principles.
• Information security and cybersecurity risk management.
• Technology resilience, availability, and continuity management.
• Vulnerability management and remediation governance.
• Technology asset lifecycle and obsolescence management.
• Application, infrastructure, and cloud security concepts.
• Third-party technology risk management.
• Technology controls and control effectiveness measurements.
• Risk appetite frameworks, KRIs, and management reporting.
• Risk Governance and Reporting
• Technology risk management.
• Risk reporting and analytics.
• KRI development and monitoring.
• Governance and committee management.
• Regulatory and audit coordination.
• Data analysis and trend identification.

Analytical and Problem-solving

• Strong analytical and critical-thinking capabilities.
• Ability to synthesise complex information into clear and meaningful management insights.
• Ability to identify risk trends, emerging concerns, and underlying root causes across multiple data sources.
• Strong attention to detail and commitment to data quality.

Communication and Stakeholder Management

• Strong written and verbal communication skills, with ability to prepare clear management reporting, meeting material, and presentation decks.
• Ability to translate technical and cybersecurity-related issues into business and risk implications for senior management.
• Strong stakeholder management and influencing skills.
• Ability to collaborate effectively across Technology, Information Security, Risk, Audit, and Business functions.

Personal Attributes

• Proactive, resourceful, and self-driven.
• Strong organisational and coordination skills.
• Ability to operate effectively within a dynamic and evolving environment.
• Comfortable working across both strategic and operational activities.
• Strong ownership mindset with the ability to manage multiple priorities concurrently.

Be a part of UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a difference.

Additional Requirements

Be a Part of the UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a Difference