{"id":3315157,"url":"https://alion.io/job/great-eastern-manager-it-risk-and-compliance","title":"Manager - IT Risk and Compliance","company":{"id":453576,"name":"Great Eastern","domain":"greateasternlife.com","url":"https://alion.io/company/great-eastern","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":36,"ghost_share":0.361,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Leadership","role_family":"Leadership","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":41000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":257},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CAPA","optional":false}],"status":"live","first_seen_at":"2026-10-27T04:58:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T04:58:00Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"About the Job\nIntegral role in IT Risk and Compliance team, responsible to evaluate overall information technology risk, maintain an active view, and report the overall risk & compliance posture to Group IT management on regular basis.\n\nImplement and maintain the IT Compliance Programme to provide assurance over Group IT's compliance status. This includes validating key IT controls based on annual prioritization using industry-accepted sampling methodologies. Reviews will cover relevant processes, systems, reports, and metrics.\nMonitor and assess IT compliance with regulatory requirements, internal policies, and standards, and report any compliance gaps or breaches to management.\nTrack and evaluate changes in technology-related regulations and legislation that may impact Group IT's technology risk and compliance posture, and recommend appropriate remediation measures.\nConduct compliance reviews of key IT processes and systems in accordance with the annual review plan, identifying gaps against regulatory, policy, and control requirements.\nPrepare timely compliance review reports, communicate findings to management, and monitor remediation actions through to closure.\nSupport the consolidation and submission of Compliance Event Reporting from Group IT to Group Risk Management (GRM) and local Risk Management & Compliance (RM&C) teams.\nSupport the review and assessment of Control Risk Self-Assessment (CRSA) activities in accordance with GRM and local RM&C requirements.\nParticipate in technology risk assessments for emerging technology domains, including Artificial Intelligence (AI), Cloud Computing, and other new technologies.\nSupport the management and oversight of Third-Party Risk Management (TPRM) processes for the GELM IT department.\nPrepare and maintain regular management reporting on IT compliance and technology risk matters.\nCoordinate IT audit engagements, including monitoring audit progress, tracking information requests, and escalating overdue items where necessary.\nParticipate in root cause analysis activities for technology incidents and assist in identifying corrective and preventive actions.\nConduct awareness sessions and promote staff understanding of IT risk, compliance requirements, and control responsibilities.\nSupport the Department Risk Officer and Department Compliance Officer in executing risk and compliance governance responsibilities.\nMaintain the department's Risk Control Self-Assessment (RCSA) framework and perform control testing in accordance with GRM and local RM&C requirements.\nReview and assess various risk assessments, including Project Risk Assessments, General Purpose Risk Assessments, IT Risk Acceptance requests, and related technology risk documentation.\n\nWe are looking for people with\nBachelor's Degree in Information Technology, Business Administration, Risk Management, Information Security, or a related discipline. \nMinimum 5 of relevant experience in Technology Risk, IT Compliance, IT Audit, Information Security, IT Governance, or Risk Management. \nProfessional certifications such as CISA, CISM, CRISC, CISSP, or equivalent are preferred. \nGood understanding of MAS Technology Risk Management (TRM) Guidelines and BNM Risk Management in Technology (RMiT) requirements. \nKnowledge and hands-on experience in Risk and Control Self-Assessment (RCSA) methodologies, including control design and control effectiveness testing. \nExperience in data analytics and reporting, including the use of analytics tools to support risk and compliance monitoring. \nStrong analytical, problem-solving, and stakeholder management skills. \nExcellent communication, presentation, and report-writing skills. \nExperience in the insurance, banking, or financial services industry would be an advantage.\n\nHow you succeed\nChampion and embody our Core Values in everyday tasks and interactions.\nDemonstrate high level of integrity and accountability.\nTake initiative to drive improvements and embrace change.\nTake accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.\nKeep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.\n\nWho we are\nFounded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei.\n\nThe Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of AA- by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia.\n\nGreat Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world's most highly-rated banks, with an Aa1 rating from Moody's and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World's Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.\n\nTo all recruitment agencies: Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.","description_format":"text","description_chars":5886,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-27T04:58:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":32,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/great-eastern-manager-it-risk-and-compliance","json_url":"https://alion.io/job/great-eastern-manager-it-risk-and-compliance.json","meta":{"generated_at":"2026-10-31T22:40:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35405,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":453576},"rest":"https://alion.io/mcp/rest/get_company?id=453576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgreat-eastern-manager-it-risk-and-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgreat-eastern-manager-it-risk-and-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgreat-eastern-manager-it-risk-and-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/great-eastern-manager-it-risk-and-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgreat-eastern-manager-it-risk-and-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3315157}},{"tool":"search_jobs","arguments":{"company":"greateasternlife.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3315157},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}