Assistant Manager, Program Management & Governance

Role Overview

As an Assistant Manager within the Governance, Risk and Compliance (GRC) team of the Security, Process and Governance department under the Digital Technology Transformation division, you will oversee the risk management and governance activities related to ICT and Smart Systems (ICTSS) for Sentosa Development Corporation (SDC).

Reporting directly to the GRC Manager, your responsibilities include administration of GRC custody systems such as the IT Service Management (ITSM) platform handling service and change requests along with incident reporting, Project & Portfolio Management tools, Compliance tracking, Digital Governance Platform, and sustaining GRC knowledge bases and document repositories.

Key Responsibilities

• Administer GRC-related systems like ITSM and Digital Governance Platform to ensure operational efficiency.
• Maintain and manage GRC knowledge bases, guidelines, forms and templates within the SharePoint Online environment.
• Coordinate tracking and reporting efforts for ICT and Smart Systems delivery and support projects using Project & Portfolio Management systems.
• Assist in maintaining ICT and Smart Systems Policies alongside System Security Plans (SSPs) as directed by the GRC Manager.
• Liaise with security testing vendors to monitor and report on scheduled Vulnerability Assessment and Penetration Testing (VAPT) and Source Code Review (SCR) activities; follow up with system managers to resolve findings promptly.
• Coordinate IT audit reviews and facilitate responses between internal teams and external auditors.

Qualifications and Requirements

• A Diploma or Degree in Information Technology or a closely related discipline.
• At least two years of experience managing IT application system life-cycles or providing system support and management.
• Knowledge of data and cybersecurity risks and controls throughout system implementation and support, including exposure to vulnerability assessments, penetration testing, and source code reviews for cloud-hosted, web-based, and mobile solutions.
• Solid understanding of IT risk management principles and control frameworks.
• Experience with system audits and exposure to public sector system policies and governance is beneficial.
• Capability to manage occasional tight deadlines and project constraints in dynamic environments, including handling ad-hoc risk profiling and compliance reporting.
• Familiarity with governmental procurement procedures.
• Excellent verbal and written communication skills.