SVP, Head of Technology and Operational Risk Audit

Company: 2201 United Overseas Bank (Malaysia) Bhd

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values – Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

Job Description

Role Purpose

Hands-on Senior Audit Leader for the Technology and Operational Risk Audit portfolio, providing independent, forward-looking assurance over the bank's technology, cybersecurity, digitalisation, data, artificial intelligence and operational risk landscape.

The role combines deep subject-matter credibility with disciplined audit execution, persuasive stakeholder engagement and visible people leadership. The successful candidate will translate emerging technology, operational risk and regulatory developments into a focused audit response, deliver the approved audit plan to schedule and quality, and build a high-performing team with strong bench strength and future-ready skills.

Leadership Mandate

• Own and execute the risk-based Technology and Operational Risk Audit plan, maintaining rigorous control over scope, resources, quality and reporting timelines.

• Provide an independent view of whether technology, cybersecurity and operational risks are understood, governed and controlled within risk appetite.

• Act as a trusted but appropriately challenging adviser to senior Technology & Operations leaders, Operational Risk Management, senior management, governance committees and the Board.

• Partner closely with Group Technology Audit and other Internal Audit leaders on thematic, cross-border and integrated audits.

• Set the direction for technology-enabled auditing, including advanced data analytics, automation and responsible use of Gen AI across the audit lifecycle.

• Provide technical leadership and constructive challenge to the Innovation & Decision Science team, helping translate analytics, automation, network analysis and Gen AI into scalable, well-governed audit capabilities.

• Build leadership depth through active coaching, succession planning differentiated development and disciplined performance management.

Key Responsibilities

1. Audit Plan Delivery and Project Management

• Deliver the approved Technology and Operational Risk Audit plan on schedule, without compromising independence, audit quality or risk coverage.

• Apply strong audit project management across the audit lifecycle and remain actively involved in audit execution, providing constructive challenge to deliver high-quality outcomes for stakeholders.

• Maintain transparent portfolio oversight and proactively manage delivery risks.

• Allocate resources effectively and provide hands-on leadership for complex, sensitive or off-track audits.

•  Ensure all audit work and reporting meet Internal Audit methodology and quality standards.

2. Technology, Cybersecurity and Digital Assurance

• Lead assurance over cybersecurity, cloud and third-party technology risk, infrastructure, applications, data protection, operational resilience and technology service management.

• Assess digital banking, mobile, APIs, payments, change delivery and production stability.

• Identify emerging technology risks and ensure timely audit coverage

3. Operational Risk Management Assurance

• Lead assurance over operational risk management frameworks, governance, risk appetite, RCSA, key risk indicators, incident and loss-event management, scenario analysis and issue management.

• Assess the effectiveness of first-line ownership and second-line oversight of operational risks.

• Evaluate operational risk events, root-cause analysis and remediation effectiveness.

• Use data and thematic analysis to identify recurring incidents, control weaknesses and emerging risks.

4. Data Analytics, Automation and Gen AI

• Embed data analytics into audit planning, testing, risk assessment and continuous monitoring.

• Champion automation and reusable analytics that improve assurance coverage and productivity.

• Lead responsible Gen AI adoption and partner with the Innovation & Decision Science team to develop scalable analytics, automation and AI audit capabilities, providing technical guidance and constructive challenge on solution design and control considerations

5. Reporting, Influence and Regulatory Engagement

• Produce concise, evidence-based reports with clear root causes, risk implications and required actions.

• Provide updates to senior management, the Audit Committee and the Board.

• Engage credibly with regulators, including Bank Negara Malaysia, when required.

6. Talent Development and Coaching Leadership

• Lead, coach and develop technology and operational risk auditors.

• Build capability across cybersecurity, operational risk, digitalisation, analytics, Gen AI, project delivery and audit leadership.

• Develop talent through coaching, feedback, development opportunities and senior stakeholder exposure.

• Strengthen succession pipelines and build internal and external talent benches.

Job Requirements

• Approximately 20 years or more of relevant experience in technology audit, cybersecurity, technology risk, operational risk management or related fields, preferably in technology, consulting, IT service providers, banking or financial services.

• Demonstrated leadership of a significant technology and/or operational risk audit portfolio.

• Strong audit project management and stakeholder management experience.

• Substantive cybersecurity expertise and credibility to challenge senior technical stakeholders.

• Strong understanding of banking operational risk, resilience, incidents and control environments.

• Experience in digital transformation, data analytics and AI/Gen AI assurance.

• Ability to provide technical leadership to analytics, innovation and decision science teams without direct reporting authority.

• Proven talent development, succession planning and coaching leadership.  

• Bachelor's degree or equivalent in Technology, Cybersecurity, Engineering, Data, Accounting, Finance or a related discipline.

• Relevant certifications such as BKA, CISA, CISSP, CIA, CRISC or CISM are strongly preferred.

• Strong expertise across technology audit, cybersecurity, digital transformation, operational risk management, data analytics and Gen AI governance, with the ability to engage and challenge senior stakeholders.

Additional Requirements

Develop, Engage, Execute, Strategise

Be a Part of the UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a Difference