Technology Risk & Operations Engineer

Technology Risk & Operations Engineer Overview A rapidly growing, MAS-regulated digital financial services firm is seeking a Technology Risk & Operations Engineer to support its technology risk, operational resilience, and regulatory compliance initiatives. This is a hands-on role combining technology risk management, production support, and software engineering within a highly regulated environment. Key Responsibilities Develop and maintain technology risk and IT governance frameworks aligned with regulatory requirements. Implement and enhance technology controls across access management, change management, logging, monitoring, vulnerability management, and operational resilience. Drive secure SDLC practices and support technology governance for regulatory and audit readiness. Investigate and remediate technology and operational control gaps through hands-on engineering changes. Provide production support for critical applications, including incident management, troubleshooting, root cause analysis, and system monitoring. Collaborate with engineering, compliance, operations, and external stakeholders on regulatory, audit, and technology initiatives. Support business continuity, disaster recovery, and third-party technology risk management. Requirements 5+ years' experience across technology risk, IT operations, production support, software engineering, or related disciplines. Experience working within a regulated financial services environment, with knowledge of technology risk and governance frameworks. Hands-on experience with Java or similar backend technologies, SQL, APIs, and production troubleshooting. Strong understanding of secure SDLC, CI/CD, IT controls, incident management, and operational support. Excellent documentation and stakeholder management skills. Exposure to digital assets, payments, trading, or financial markets is advantageous. Preferred Experience Experience supporting regulatory or license-related technology initiatives. Familiarity with cloud infrastructure (AWS), containerization, CI/CD pipelines, and monitoring tools. Professional certifications such as CISA, CRISC, CISSP, or ITIL are beneficial.