Job Summary:
Reporting to the Validation Lead, the Line 1.5 validation role provides independent, control-focused validation within Operations and Technology (ONT). The role evaluates the design and operating effectiveness of controls across technology, cybersecurity, and operational processes. It partners closely with First Line control owners, leveraging data-driven and continuous validation to identify control gaps earlier and strengthen regulatory control alignment.
Job Responsibilities:
Control Assurance and Testing
- Perform independent validation of key ONT controls, assessing design and operating effectiveness of controls related to areas such as cybersecurity, IT operations, data governance, change management, outsourcing, and access management.
- Assess adherence to internal policies, standards, and regulatory requirements (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
- Document validation findings and providing clear, actional recommendations.
- Develop and implement continuous validation use cases to provide more timely control gap identification and reduce reliance on manual testing.
Regulatory Compliance
- Support the interpretation and implementation of regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
Risk Governance, Reporting, and Stakeholder Engagement
- Prepare validation reports for ONT management and risk committees with clear risk articulation, prioritised recommendations, and target implementation dates.
- Engage constructively with stakeholders across Line 1, 2, and 3, promoting a strong risk and control culture.
Job Requirements:
Control Assurance and Testing
- Perform independent validation of key ONT controls, assessing design and operating effectiveness of controls related to areas such as cybersecurity, IT operations, data governance, change management, outsourcing, and access management.
- Assess adherence to internal policies, standards, and regulatory requirements (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
- Document validation findings and providing clear, actional recommendations.
- Develop and implement continuous validation use cases to provide more timely control gap identification and reduce reliance on manual testing.
Regulatory Compliance
- Support the interpretation and implementation of regulatory expectations (e.g., MAS TRM, MAS Cyber Hygiene Notices, Outsourcing Guidelines, CCoP).
Risk Governance, Reporting, and Stakeholder Engagement
- Prepare validation reports for ONT management and risk committees with clear risk articulation, prioritised recommendations, and target implementation dates.
- Engage constructively with stakeholders across Line 1, 2, and 3, promoting a strong risk and control culture.