Information Security Governance, Risk and Compliance, Asst. Manager

5 days ago


Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time
Information Security Governance, Risk and Compliance, Asst. Manager

Boost WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Responsibilities:

Information Security Governance

  • Accountable for the regular review of IT governance, processes and control mechanisms to ensure its relevancy with the business practices, risk management and compliance requirements.
  • Responsible to define the IT policies, standards and guidelines. The scope of policy coverage includes and not limited to Software Development Life Cycle, Change Management, Capacity Planning, and IT Continuity.
  • Establish IT governance reporting structure and perform reporting to relevant stakeholders.
  • Support regulatory requirements, audit and business development which requires IT support.
  • Responsible to drive, support and track IT Security Project/Program.

Information Security Risk and Compliance

  • Responsible for identification, assessment, escalation and mitigation of risks related to IT service.
  • Ensure risks are reported and communicated timely for management of risks and its risk treatments.
  • Develop, review and update IT risk register.
  • Provide guidance to Engineers on IT risk related matters/processes.
  • Monitor compliance on implemented standards, policies and regulatory requirements.
  • Manage policy exceptions and risk mitigation activities to improve the control environment and compliance requirements.
  • Responsible to support the IT and enterprise risk management.
  • Perform periodic reporting to risk management, information security, compliance and auditor office.
  • Establish good and effective cross department working relationships with key reporting areas and build strong working relationships with external consultants, vendors and regulators.
  • Provide advisory on policies, standards and guidelines for Information Security related internal controls and regulatory compliance.
  • Results-driven person who is highly committed and independent with minimum supervision required.
  • Excellent verbal and written communication skills with the ability to address IT governance, information security, risk management and compliance issues in both technical and non-technical terms.

The right individual will have the following key success capabilities and qualities:

  • A Bachelor's Degree in Information Systems or other related disciplines from an accredited institution is required.
  • Able to work in a hybrid setting of the workplace.
  • Possess a good background in the financial services sector, financial transactional processes, technology system, regulatory requirements and internal controls (e.g. BNM RMIT, e-money guidelines, outsourcing guidelines, risk governance, business continuity management, data and MIS framework).
  • Familiar with frameworks and standards such as RMiT, PCI-DSS, ISO 27001, NIST Cyber Security.
  • Experience in developing or implementing Information Security policies, standards and procedures.
  • Experience in identification, evaluation, management and monitoring of risk.
  • Experience in IT Security project coordination.
Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Financial Services, Banking, and Consumer Services

#J-18808-Ljbffr

  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    Boost, a pioneering organization in the financial services sector, seeks an exceptional individual to fill the role of Information Security Governance, Risk and Compliance, Asst. Manager.About the JobThis exciting opportunity is focused on driving information security governance, risk management, and compliance within our organization. As a key member of our...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    About the RoleThis senior-level position requires a skilled professional with extensive experience in information security governance, risk management, and compliance. The successful candidate will be responsible for driving information security projects, managing risk, and ensuring compliance with regulatory requirements.Key responsibilities include...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Clarks Full time

    Security Governance, Risk and Compliance LeadClarks Federal Territory of Kuala Lumpur, MalaysiaThe Security Governance, Risk and Compliance Lead is responsible for the development and operation of security and IT risk and compliance management activities within Clarks. Working with stakeholders around the business, the role will maintain effective controls...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    ResponsibilitiesThe Information Security Governance, Risk and Compliance, Asst. Manager will be responsible for:Defining IT policies, standards, and guidelines that align with business practices, risk management, and compliance requirements.Establishing IT governance reporting structures to ensure timely communication of risks to relevant...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Popular SL. Full time

    About the RoleWe are seeking a highly skilled Senior Information Security Specialist to join our Protection & Resilience team at Allianz Services. The successful candidate will be responsible for overseeing the identification, assessment, and mitigation of risks to ensure smooth operations of Allianz entities.This role requires strong expertise in...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Randstad Malaysia Full time

    About Job DescriptionContribute to IT GovernanceDevelop, implement, and maintain robust IT governance, risk, and compliance (GRC) policies, frameworks, and standard operating procedures in alignment with industry best practices and regulatory requirements.Collaborate with internal stakeholders to promote a unified approach to information security across the...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Dentsu Aegis Network Full time

    Company OverviewDentsu Aegis Network is a global network designed for what's next, helping clients predict and plan for disruptive future opportunities and create new paths to growth in the sustainable economy.We take a people-centered approach to business transformation, using insights to connect brand, content, commerce, and experience, underpinned by...


  • Kuala Lumpur, Kuala Lumpur, Malaysia SWIFT Full time

    About the RoleTo provide expert input to security strategy and control of systems, networks, physical infrastructure, people, and information. To organize the design, communication, and execution of policies/controls/procedures as appropriate for Swift and its customers, and as consistent with the company objectives, company reputation, and regulatory...

  • IT Governance, Risk

    2 weeks ago


    Kuala Lumpur, Kuala Lumpur, Malaysia Petron Malaysia Full time

    "At Petron, we are not just in the business of oil, we are also in the business of fueling lives."Petron Malaysia is an emerging and rapidly evolving Asian oil company. It is part of Petron Corporation which is the leading oil company in the Philippines. Our integrated refining, distribution, and retailing of world-class petroleum products help meet the...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Standard Chartered Life and Careers Full time

    We are looking for a Compliance Risk Governance Expert to join our team at Standard Chartered. This role is critical to ensuring that our policies and frameworks align with regulatory requirements and industry standards.In this position, you will be responsible for developing and implementing policies and frameworks that minimize risk and maximize...


  • Kuala Lumpur, Kuala Lumpur, Malaysia OCBC Bank Full time

    About the RoleWe are looking for a skilled Governance and Risk Manager to lead our IT Governance and Control initiatives. This role will involve establishing and maintaining the IT Project Management framework, conducting periodic reviews of processes and templates, and securing stakeholder buy-in and approvals.The successful candidate will also assist in...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Standard Chartered Full time

    **Operational Risk Governance**Our organization is committed to maintaining the highest standards of operational risk governance. As Head of Operational Risk Governance, you will play a critical role in ensuring that our technology and operational risks are properly identified, assessed, and mitigated.Your primary responsibilities will include developing and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Standard Chartered Life and Careers Full time

    We are seeking an experienced Governance and Compliance Expert to join our team at Standard Chartered Life and Careers.">As a Governance and Compliance Expert, you will play a critical role in ensuring that our organization maintains effective governance and compliance frameworks, aligning our operations with regulatory requirements and industry standards....


  • Kuala Lumpur, Kuala Lumpur, Malaysia Crypto Full time

    Key ResponsibilitiesRisk Management: Identify and mitigate risks associated with security projects, ensuring compliance with organizational policies and procedures.Compliance and Governance: Ensure that security projects adhere to relevant laws, regulations, and industry standards.Communication: Effectively communicate project status, potential risks, and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Zurich 56 Company Ltd Full time

    APAC Information Security ConsultantJob Title: APAC Information Security ConsultantThe Opportunity:We are looking for an APAC Information Security Consultant, who is primarily responsible for supporting information security governance initiatives and activities across APAC business units.Key Responsibility:Information Security governanceMaintain APAC's...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Mott MacDonald Full time

    The Mott MacDonald Information Security Team is responsible for developing and implementing information security strategies to support the company's regional business.This role will report directly to the Regional IT & Security Manager for Asia Pacific, New Zealand and Australia, providing an opportunity to obtain global strategic information security...


  • Kuala Lumpur, Kuala Lumpur, Malaysia TIME's group Full time

    In this fixed-term contract role, you will be responsible for managing technology and security risks across Dentsu international markets. You will work closely with the business to embed our security risk management process and support the growth and adoption of technology and security risk management processes. The ideal candidate has 2-3 years of...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Ørsted Full time

    The APAC Information Security Director will play a critical role in leading our security team and driving strategic initiatives to mitigate cyber risk. You will be responsible for evaluating, enhancing, and executing a comprehensive information security strategy aligned with the global cybersecurity strategy and Ørsted APAC business objectives and risk...


  • Kuala Lumpur, Kuala Lumpur, Malaysia SWIFT Full time

    About SwiftWe're a leading provider of secure financial messaging services, headquartered in Belgium. Our mission is to support the global economy by providing reliable, safe, and secure financial messaging services.Job SummaryThis role is responsible for developing, implementing, and ensuring the effectiveness of our Human Security Risk Management (HSRM)...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Cyber Crime Full time

    About DentsuDentsu is a network designed for what's next, helping clients predict and plan for disruptive future opportunities. We take a people-centered approach to business transformation, using insights to connect brand, content, commerce, and experience.At Dentsu, we're committed to protecting our clients' brands and data through technology and security...