Manager/Senior Manager, Policy and Governance (RTO)

Background The RIE TRUST Office has been established to enable the strategic use of data by Singapore’s RIE ecosystem in a manner that engenders public trust. Through supporting data-driven research, it aims to drive scientific excellence, strengthen national research innovation capabilities and competitiveness, as well as create impactful solutions.    The Office operates under the purview of NRF, and is administratively hosted in A*STAR. The RIE TRUST Office will coordinate and implement the RIE Data System, comprising harmonised data governance frameworks and interoperable data infrastructures to enable data research. The Office draws on learnings from ongoing efforts in the Human Health and Potential (HHP) domain and is extending to support other RIE domains such as Urban Solutions & Sustainability. RIE TRUST Office Policy and Governance is responsible for 1. Policy analysis, development and management: Support development, maintenance and implementation of policies, governance frameworks. Ensure that policies remain current, fit-for-purpose and future ready. 2. Advisory and Enablement: Advise RTO teams on governance and regulatory implications on operations. Support the communications and implementation of policies and governance. 3. Risk Management, Regulatory compliance and assurance: Support risk assessment and management through risk registers and mitigation plans. Ensure compliance to all relevant requirements e.g. regulatory, government, cyber security etc. Specifically, this role will focus on Policy development and management 1. Assist in drafting, reviewing, maintaining and updating RIE Data System Governance Framework. Monitor regulatory developments and ensure policies remain current and fit-for-purpose across RIE domains. 2. Develop policy and framework to support the implementation of RIE Data System objectives, tech and data roadmap and initiatives, working closely with domain partner ministries. 3. Support the conduct and management of policy consultation exercises (e.g. through stakeholder engagement, workgroups etc.), clearance and approval processes. Advisory and Enablement 1. Advise RTO teams on policies and regulatory implications. 2. Support implementation of governance framework. Work with RTO teams (e.g. tech, data and operations) to translate governance requirements into operational/data/tech practices and workflows. 3. Contribute to developing guidance materials and training content and support communication of policies for RTO and sharing of best practices across RIE ecosystem. 4. Coordinate responses to regulatory or stakeholder queries. Risk management, compliance and assurance 1. Support the establishment and maintenance of risk management frameworks and methodologies e.g. ICT risks. Support reviews of annual risk assessments conducted. Support risk identification, assessment and monitoring of RIE Data System residual risks. 2. Assist in establishing and maintaining incident management governance frameworks, including policies, escalation protocols, reporting standards and assurance processes. Work with RTO teams and relevant stakeholders to conduct desktop simulation exercises, ensure regulatory and governance requirements are met and support post-incident reviews and remediation tracking. 3. Support risk reporting and escalation to leadership and governance committees when required. Maintain risk registers and track mitigation actions. Job Requirements1. Minimum degree in Public Policy, Information Systems, Information Security or related discipline. 2-3 years of experience in policy, governance, audit or risk management roles. 2. Strong drafting and analytical skills. 3. Ability to multi-task, proven problem-solving skills and resourceful. 3. Familiarity with data and research governance such as Human Biomedical Research Act, Personal Data Protection Act, Public Sector Governance Act will be an advantage. 4. Team player who can communicate effectively within and across multi-domain teams and stakeholders to translate complex ideas into succinct messages/materials.