Technology Risk & Operations Engineer (IT Management)
A fast-growing Digital Asset Securities Company expanding its Digital Payment Token offering to institutional clients.

Role Summary:
An IT management role combining technology risk, compliance, operations, and engineering, sitting at the heart of the company's MPI license-readiness effort. Owns the technology risk and IT governance framework, ensures systems and controls are audit-ready, and identifies and fixes control gaps directly. Acts as the technical liaison to auditors, regulators, and vendors, working closely with compliance, operations, and engineering teams.

Key Responsibilities:

• Own the technology risk & IT governance framework, implementing and monitoring key controls (access, change/release management, vulnerability/patch management, logging, backup, resilience)
• Maintain risk registers, policies, and audit documentation; act as technical point of contact for audits, compliance reviews, and MAS queries
• Drive secure SDLC practices and produce control evidence for the MPI license application; enforce change management and access standards
• Implement technical remediation across code, CI/CD, access controls, and monitoring — owning fixes end to end
• Provide day-to-day support for trading/settlement systems, own incident management end to end, and manage vendor technology risk

Required Qualifications:

• 8+ years across technology risk management, IT operations, production support, or software engineering
• Practical MAS TRM Guidelines knowledge, ideally within a MAS-regulated financial institution
• Hands-on Java/Spring Boot experience — able to read, debug, modify, and deploy production code
• Strong production troubleshooting via SQL, logs, APIs, and monitoring tools
• Demonstrated experience implementing technology controls (access, change management, audit logging, incident management)

Preferred Qualifications:

• Direct experience supporting a MAS license application (MPI / Digital Background preferred)
• Experience preparing for MAS TRM audits, inspections, or regulatory reviews
• CISA, CRISC, CISSP, ITIL, or similar certifications
• Hands-on AWS/DevOps stack (IAM, S3, ECS/Fargate, Redis, Docker, CI/CD)
• Exposure to banking, securities, trading, settlement, or digital asset operations, including KYC/AML or reconciliation systems

Technology Environment:

• Backend: Java, Spring Boot, REST APIs, microservices, Redis
• Frontend/Mobile: React.js, React Native
• Cloud: AWS, S3, ECS Fargate, IAM, monitoring/logging
• DevOps: Git, CI/CD pipelines, Docker/containerization
• Data: Relational databases, SQL, operational reporting, reconciliation data