Deputy Director - Policy & Controls (Risk & Sector Governance)

Apply now »

Date: 26 Aug 2026

Location: SG

Company: Synapxe

Position Overview

 

The Deputy Director is responsible building and maintaining the policies and standards that guide how Synapxe operates, making sure they stay up to date, practical, and in line with regulatory requirements and industry norms. This means taking complex regulatory and governance requirements and turning them into clear, workable policies and controls that are applied consistently across Synapxe.

The Deputy Director also runs the compliance programme, which includes evaluating whether controls are working as intended, managing exceptions, and conducting self-assessments to check that Synapxe is meeting its obligations. A key focus is strengthening the Control Library — the central repository of controls that Synapxe relies on to manage risk and demonstrate compliance.

As a team leader, the Deputy Director sets direction, builds team capability, and creates the conditions for the team to thrive. The role also plays an important connecting function, working across teams and stakeholders to ensure everyone is aligned on how compliance and governance responsibilities are carried out.

Role & Responsibilities

 

Policy and Standards Governance

  • The integrator and principal point of contact for the development and maintenance of Synapxe's policies, standards, guidelines, and control libraries.
  • Ensures that policies and standards are contextualised, operationally feasible, and reflective of regulatory obligations and industry best practices.
  • Proactively monitors evolving risk trends and the changing threat landscape to ensure the framework remains relevant and fit for purpose. 

Controls Design and Compliance Assurance

  • Oversees the translation of policy and regulatory requirements into practical control design across Synapxe's lines of business, including the ongoing development and maturity of the Healthcare Control Library.
  • Drive the end-to-end design and implementation of the Control Self-Assessment framework, including attestation, deviation management, and remediation tracking, enabling accurate visibility into Synapxe's compliance posture and risk exposure.

Compliance and Deviation Management

  • Oversee the end-to-end attestation and deviation management lifecycle within the Integrated Risk Management (IRM) system, driving timely attestations, robust deviation governance, and effective remediation tracking to strengthen Synapxe's overall compliance posture and risk management framework.

Stakeholder Engagement and Outreach

  • Drive alignment across Synapxe and foster strong partnerships with internal stakeholders, peers, and the Ministry to ensure policy compliance is embedded within strategic priorities and operational practices.
  • Lead organisation-wide outreach and engagement on policies, the Control Library, and attestation processes to strengthen compliance awareness and cultivate a culture of sound, risk-informed decision-making.

Team Management and Delivery

  • Provide leadership and oversight for the day-to-day operations of the team, ensuring work is delivered effectively, efficiently, and to a high standard.
  • Responsible for setting priorities, managing resources and workplans, coaching and developing team members, and removing barriers to execution.
  • Foster a culture of collaboration, innovation, and continuous improvement, while building a cohesive and engaged team that is committed to achieving shared organisational goals.

Requirements

 

  • Bachelor’s degree in computer science or STEM Majors (Science, Technology, Engineering and Math) with over 18 years of experience.
  • Recognized industry leading certifications in relevant areas such as CISA, CISM, CRISC, CGEIT, CISSP, and GIAC certifications.
  • Experience in policy, standard and guideline implementation in cyber security and technology risk domain.
  • Solid technical writing and attention to details.
  • Working knowledge on well-recognized frameworks & standards such as IM8, NIST CSF, COBIT5/2019, and ISO27000 series
  • Command a good understanding and experience in cyber security, risk management, and compliance concepts and processes.
  • Ability to consult and influence stakeholders on alignment of outcomes and desired technical solutions.
  • Ability to Analyze, design, and develop a solution roadmap and implementation plan based upon a current vs future state.
  • Understand how internal & external business model works and facilitate active customer engagement.
  • Demonstrated Change Management capabilities.
  • Anticipate obstacles, identify workarounds, leverage resources, rally teammates.
  • Strong interpersonal skills, including creativity and curiosity with ability to effectively communicate and influence across all organizational levels.
  • Proven analytical and problem resolution skills.

Apply Now

Click Enter to update the description of Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!