Head of Operational Risk & Security Singapore

LGT is the largest Private Banking and Asset Management group in the world to be owned by an entrepreneurial family. As the family office of the Princely House of Liechtenstein, we have years of experience in the management of sizeable sums of assets.

Control environment

• Design, implement and maintain strong and effective Operational & Information Security Risk Management Framework, programs and directives for the Bank
• Oversee the Information Security Risk Management Framework, programs and directives for the Bank, ensuring consistency with Group standards and local regulatory requirements
• Ensure Group Information Security directives are translated into local procedures and controls and effectively rolled out through the designated Information Security Risk Manager

Risk Assessment

• Support and coordinate LGTS Risk and Control Self-Assessments. Work with key stakeholders to identify key risk controls and design effective framework for risk mitigation
• Perform root cause analysis on Operational Risk Events
• Oversee Outsourcing assessment and enhance existing framework processes. Ensure regulatory requirements with respect to outsourcing are met
• Perform thematic / risk reviews (as required)
• Oversee Information Security risk assessments, thematic reviews and remediation actions performed by the designated Information Security Risk Manager
• Ensure client and bank data are adequately protected through appropriate data classification, handling, access restriction and need-to-know principles

Control Activities

• Manage the development of Operational & Information Security Risk related initiatives
• Work with line management and Internal Audit to understand preliminary findings prior to draft Internal Audit reports

Information and Communication

• Analyse, prepare and present operational risk related updates at monthly Risk Management Committee (RMC)
• Rollout initiatives to improve control awareness and controls
• Oversee Information Security awareness initiatives such as training, phishing simulations, internal campaigns and related Group Information Security initiatives

Monitoring activities

• Work with respective department heads to ensure timely and adequate closure of open audit points
• Review key risk indicators for adequacy and completeness

• Bachelor’s degree in information security, risk management, or related discipline

• At least 8 years of hands-on experience in Operational Risk and Information Security within banking or financial services; experience in private banking / wealth management is an advantage

• Good knowledge of Operational Risk Information security principles, access control and data protection, core banking systems (e.g. Avaloq) and Regulatory requirements in Singapore, including MAS guidelines relevant to technology and cybersecurity (e.g. TRM, Cyber Hygiene Guidelines) and data protection (e.g. PDPA) and possess the ability to interpret regulatory expectations and incorporate them into risk frameworks, processes, and controls

• Proven ability to design, implement and maintain risk management frameworks, policies, and directives at bank level

• Strong risk mindset with the ability to balance security, operational practicality and client service

• High level of integrity, discretion and confidentiality, particularly in handling client and employee data

• Able to communicate clearly and professionally with the front office and other stakeholders

• Demonstrated ability to build and maintain strong relationships with senior stakeholders across COO, IT, business units, and control functions

• Strong track record of leading cross‑functional initiatives and special reviews to improve control environment and process efficiency

• Ability to influence and challenge constructively while maintaining a collaborative approach

La LGT promuove la diversità dei suoi dipendenti. Crediamo che una cultura aziendale inclusiva e apprezzabile sia il motore di un ambiente di lavoro eccellente e offra l'opportunità di creare un team unico e di successo. Ecco perché i nostri dipendenti possono beneficiare di molti altri vantaggi.