Risk Manager (IT)

Monroe Consulting Group, an Executive Recruitment firm, is partnering with an organisation in the Professional Services sector to hire a Risk Manager (IT). This opportunity supports a global asset servicing organisation serving institutional clients across Europe, with a strong operational hub based in Malaysia.

Position Overview
This role focuses on IT risk and security within the Risks & Controls function, covering incident management, control execution, and IT risk mapping.
It plays a critical role in strengthening operational resilience, control effectiveness, and risk transparency across technology and business functions.

Key Responsibilities

  • Ensure accurate and complete documentation of IT incidents detected by operational staff or IT teams
  • Lead coordination between IT, operational teams, and management during incident handling, where required
  • Validate root cause analysis and closely monitor, challenge, and follow up on corrective action plans
  • Participate with Information Systems and IT Security teams in reviewing and maintaining up‑to‑date control plans aligned with business and technology changes
  • Perform Level 2.1 controls and assess control effectiveness
  • Prepare control reports and issue recommendations where results are not satisfactory
  • Present consolidated control results, including Level 1 outcomes, at relevant governance committees
  • Support IT and Security teams in the establishment and maintenance of IT and security risk maps
  • Challenge and validate the identification and assessment of IT and security risks
  • Follow up on recorded errors to ensure consistency between financial impacts and incident records
  • Produce reports on IT risk indicators, incident trends, and associated remediation action plans
  • Provide subject matter expertise in IT risk and security and support crisis coordination activities where required

Key Requirements

Qualifications & Experience

  • Degree in Information Technology or a related discipline
  • Minimum 6 years of experience within the Financial Services and/or Information Technology sector
  • Strong understanding of the financial or asset servicing domain, including structures, processes, procedures, and supporting technologies

Technical / Functional Expertise

  • Experience in IT risk management, security controls, and incident management
  • Exposure to control frameworks, risk mapping, and internal control assessments
  • Ability to assess control effectiveness and translate findings into actionable recommendations

Soft Skills & Leadership Competencies

  • Strong written and verbal communication skills, with the ability to present risks and recommendations clearly to senior management
  • Ability to navigate large, complex organisations and build collaborative cross‑functional relationships
  • Proven stakeholder management skills in challenging and matrixed environments
  • Analytical, structured, and resilient, with the confidence to challenge and influence constructively

Preferred / Advantage

  • Relevant experience in risk management within asset servicing or financial institutions is advantageous but not essential