Total 197 Director/C-Level executive assistant job vacancies in Singapore

WHO WE ARE

Led by the Chief Information Security Officer (CISO), Technology Risk leads the effort to secure Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA. Within Technology Risk, Advisory is the consultative and technology subject matter expertise arm, responsible for assessing new technology initiatives for risk, partnering with engineers to architect and design secure products and services, embedding implementation reviews as part of the SDLC and CI/CD pipeline via code analysis and penetration testing, and guiding technology innovation in terms of security and control across Goldman Sachs. The team plays a critical role in designing and assessing controls for our transition to building native public cloud applications.

YOUR IMPACT

In this role, you will be supporting one of the following key pillars of Tech Risk Advisory, which is the consultative and technology subject matter expertise arm, responsible for assessing new technology initiatives for risk, partnering with engineers to architect and design secure products and services, via Architecture assessment and penetration testing, and guiding technology innovation in terms of security and control across Goldman Sachs.

Based on your skills and interests, you would be aligned with one of the key Advisory pillars and responsible for delivery of subset of the functions as part of the team.

Tech Risk Advisory Pillars

• Application Security: Help architect and software engineers design and build secure applications.

• Identity and Access Management: Drive the design of business-driven entitlements for end users and systems to allow authorized access to data and services.

• Data Security & Privacy: Drive the inventory of personal data in the firm, design systems that protect and allow authorized access to the data.

• Acquisitions & Divestitures: Assess the security posture of a potential acquisition, strategic investment, new business, or firm divestiture and provide support on any of the above as it relates to the firm's security controls.

• Mobile Security: Help engineering teams to design and build secure mobile applications.

• Platform Security Architecture: Drive secure design of enterprise platforms, develop secure frameworks and patterns for infrastructure, cloud, and emerging technology, establish shared responsibility models for shared and firmwide platforms.

• Vendor & Partner Security: Assess and oversee information security, application security, Cloud security and business continuity related risks that may arise from outsourcing business activities to vendors.

• Secure-SDLC: Help engineering teams to identify and remediate security flaws in applications at scale through automated means.

HOW YOU WILL FULFILL YOUR POTENTIAL

You will become a highly committed and trusted Risk Advisor with the discipline and interpersonal skills to work in a global environment communicating the impact of technology risks and the approach to mitigation and acceptance. You will provide Technology Risk Advisory risk assessment and advisory services to engineers and business leaders as part of the Technology Risk function.

Overall, the Job Responsibilities of Tech Risk Advisory involve one or more of the following elements, the specifics of which may vary per function:

JOB RESPONSIBILITIES:

· Perform pentest of web applications, APIs, Mobile applications, and Thick Client applications, both On-prem and in the Cloud

· Design secure patterns and produce guidance to reduce risks through opinionated architecture

· Validate security controls and uncover misconfigurations across various cloud deployments

· Perform software architecture design reviews/threat modeling for on-prem or cloud-based applications

· Drive adoption of embedded application security controls within the firm’s Software Development Life Cycle (SDLC)

· Develop detection capabilities for Static and Dynamic security testing solutions and support development teams in their remediation efforts to address security flaws identified through automated scanning

· Conduct Cyber security assessments of the firm’s vendors commensurate with the information risk of the relationship

· Support the firm's acquisition strategy by providing deal teams with insight into material cyber security risks, control differences, and risk remediation priorities for potential acquisition targets

· Partner with business and technology teams to identify security-related concerns relating to divestitures, such as separation strategy, data and system migration plans, and inputs for Transition Service Agreements (TSAs) and Reverse TSAs

· Provide guidance to business and technology users on relevant policies/standards related to data protection, privacy, and data risk management to enable adoption of secure and resilient solutions

· Support IAM program initiatives such as Privileged Access Management (PAM), Role-Based Access Control (RBAC), Segregation of Duties (SOD) and Single Sign-on Design Pattern enforcement.

JOB REQUIREMENTS:

· Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

· Min. 10 years of experience in Technology Risk and/or Cybersecurity, with a proven track record of being in a consulting or security engineering capacity.

· Deep understanding of at least one major programming language (Java, Python, Go) and modern engineering practices (Microservices, Containerization, IaC).

· Hands-on experience with public cloud platforms and their respective security frameworks.

· Exceptional interpersonal skills with the ability to influence technical and non-technical stakeholders globally.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

©The Goldman Sachs Group, Inc., 2026. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.

JOB SUMMARY

The Singapore Operational Risk Management (ORM) lead is responsible for providing independent second line oversight of operational and non‑financial risks for the Eastspring Singapore and Hong Kong entities. The role leads the Singapore Operational Risk team to ensure that the operational risk management practices are robust, proportionate, and aligned with required risk frameworks, regulatory expectations, and the firm’s risk appetite.

The role partners closely with senior management and first line stakeholders to provide effective challenge, drive sound risk outcomes, and promote a strong risk culture across the organisation. As the senior ORM lead for Singapore, the role is accountable for the end‑to‑end execution of operational risk oversight activities, including incident management, risk and control assessments, issues remediation, and risk reporting to management and governance committees. The responsibility also includes the organisation and coordination of the ISAE 3402 audits conducted annually.

KEY ACCOUNTABILITIES

1. Operational Risk Oversight

• Provide independent second line oversight of operational and non‑financial risks across the Singapore entity in accordance with Prudential ORM policies, standards, and local regulatory requirements.
• Oversee the execution and quality of core ORM activities, including risk and control self‑assessments (RCSA), operational incident management, root cause analysis, issues remediation tracking and KRI monitoring.
• Review and challenge the design and effectiveness of key controls, ensuring that material risks are appropriately identified, assessed, and mitigated.
• Monitor risk trends, emerging risks, and control weaknesses, with timely escalation of material issues to senior management and relevant governance forums.
• Take up responsibility as the operational risk MIC for Hong Kong.

2. ISAE Audit Oversight and Coordination

• Serve as the second line lead responsible for end-to-end coordination of ISAE (e.g. ISAE 3402) audits for the Singapore entity.
• Coordinate across first line process owners, internal stakeholders and external auditors to ensure timely, complete, and high-quality delivery of ISAE audit engagements.
• Provide independent oversight and challenge on the scope definition, control descriptions, control design and operating effectiveness relevant to ISAE reports.
• Review and challenge audit observations, management responses, and remediation plans to ensure issues are appropriately addressed and tracked to closure.
• Ensure ISAE outcomes, key control themes, and material findings are appropriately escalated and reported to management and relevant governance committees.
• Drive continuous improvement by leveraging ISAE findings to strengthen the control environment and reduce recurring audit issues.

3. Governance, Reporting and Regulatory Engagement

• Ensure timely and accurate preparation of operational risk reporting for management committees, risk committees, and Board-level forums, including Business Control Reports and risk dashboards for Singapore and Hong Kong.
• Support regulatory interactions and supervisory reviews as required by providing clear articulation of the operational risk framework, key risk exposures, and remediation actions.
• Ensure alignment between Singapore ORM practices and Prudential-wide risk governance expectations, while addressing local regulatory and business nuances.

4. Stakeholder Partnership and Risk Advisory

• Act as a trusted risk advisory partner to senior management and first line functions, providing independent challenge and pragmatic guidance on operational risk matters.
• Provide risk input and challenge on new initiatives, change programmes, outsourcing arrangements, and material business decisions from an operational risk perspective.
• Work closely with other second line functions (e.g. Compliance, Investment Risk, Technology Risk) to ensure coherent and coordinated risk oversight.

5. Risk Culture and Continuous Improvement

• Promote a strong risk culture by reinforcing accountability, risk ownership, and disciplined execution of risk management practices across the business.
• Drive continuous improvement in operational risk processes, tools, and reporting, including the effective use of risk systems and data.
• Contribute to Prudential and Eastspring risk initiatives, projects, and framework enhancements as required.

6. People and Team Leadership

• Lead and develop the Singapore / Hong Kong ORM team, ensuring clear accountability, appropriate capability, and effective resource deployment.
• Provide coaching and guidance to team members to build technical risk capability and judgement.

QUALIFICATIONS AND EXPERIENCE

• Extensive experience in Enterprise or Operational Risk Management within a regulated financial services firm, preferably in asset management or wealth management with a global presence.
• Strong of understanding of operational risk frameworks, non-financial risk management practices, and governance expectations in Singapore and Hong Kong.
• Experience overseeing or coordinating independent assurance engagements (e.g. ISAE 3402, internal audit, or equivalent), with a strong understanding of control design, operating effectiveness, and remediation management.
• Demonstrated ability to provide effective independent challenge at senior management and committee level.
• Strong judgement, analytical capability, and ability to translate risk insights into clear, actionable messages.
• Proven stakeholder management skills, with the ability to balance robust challenge and constructive partnership.
• Experience in leading teams and managing complex risk issues across multiple stakeholders is preferred.