ERM Specialist - Senior Manager/Assistant Director
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
[What you will be working on]
GovTech builds and runs digital systems that Singaporeans use every day, often without noticing. From digital identity and payments to cloud platforms and AI tools used across government, the work sits right at the intersection of technology and public trust. But technology has changed. Systems are no longer static. They evolve continuously, connect everywhere, and increasingly make decisions on their own. The old model of governance and risk management is struggling to keep up.
This role is for someone who wants to help rethink that. Someone curious enough to question old assumptions, practical enough to work alongside engineers and product teams, and grounded enough to know that governance only matters if it helps people make better decisions in the real world. You will work on difficult but meaningful problems at national scale. The kind where there are no clean textbook answers yet. The upside is that you will not just be managing risk. You will help shape what modern governance looks like for cloud, AI, and digital public infrastructure in the years ahead.
The problems you will help solve
You will spend your time on questions that do not have settled answers, such as these:
-
How do we apply quantitative and structured risk management approaches in ways that genuinely sharpen decisions, rather than producing analysis that sits unread?
-
How do we connect enterprise risk management to operational telemetry and engineering workflows, so signals from the live environment shape our risk picture in near real time?
-
How do we surface and articulate risks that are inherently cross-cutting, where cybersecurity, technology, data, and citizen impact intersect?
-
How do we balance the appetite to innovate quickly in areas like AI, cloud, and platform engineering with the obligation to be a careful steward of public systems and public money?
-
How do we make risk conversations genuinely useful to senior leadership, the board, and partner agencies, rather than a compliance ritual?
-
How do we manage risk-based exceptions as real decisions rather than paperwork, ensuring each one is scoped, owned, and time-bound, while also reading the pattern of exceptions across the organisation as a signal about where our controls or standards need to evolve?
-
How do we run third-party and supply chain risk as a continuous practice, where ongoing signals (e.g., incidents, posture changes, geopolitical shifts, financial health) reshape our view of third-party relationships and corresponding risk responses?
[What we are looking for]
Who you are
-
You have at least 8 years of experience in enterprise risk, technology risk, or operational risk and resilience, and you have worked hands-on with frameworks such as FAIR, ISO 31000, COSO ERM, or operational risk models. You know these tools well enough to apply them selectively and adapt them when they do not quite fit.
-
You are comfortable in the world of technology and digital systems. You do not need to be an engineer, but you should be able to hold a credible conversation about cloud, data, cybersecurity, software delivery, and emerging technologies like AI — and know when something you are hearing deserves more scrutiny.
-
You have reported to or engaged regularly with senior executives, audit committees, or board-level risk committees. You understand what those audiences need from a risk lens, and you know the difference between informing a decision and just presenting a slide.
What will set you apart
-
You possess strong analytical thinking and structured problem-solving abilities, with the capacity to synthesise complex information into clear, actionable insights.
-
You translate technical and operational complexity into language that helps non-specialists make better decisions.
-
You can challenge senior stakeholders constructively, holding firm on risk issues without becoming an obstacle to delivery.
-
You are comfortable with ambiguity. Many of the risks we deal with are novel, and there is no perfect playbook.
-
You are pragmatic. You know that a risk framework is only as valuable as the decisions it improves.
A note before you apply
We would rather have an honest conversation with someone who is curious and capable than receive a polished application from someone who meets every criterion on paper but isn't genuinely drawn to the mission. If the problems above sound like the ones you want to spend the next few years solving, we would like to hear from you.
What we offer you:
GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.
Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programs.
We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.
Learn more about life inside GovTech at go.gov.sg/GovTechCareers.
Stay connected with us on social media at go.gov.sg/ConnectWithGovTech