Information Risk Management Lead

4 weeks ago

Kuala Lumpur, Malaysia Manulife Full time

We are a leading financial services provider committed to making decisions easier and lives better for our customers and colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. To help us stand out, we help you step up, because when colleagues are healthy, respected and meaningfully challenged, we all thrive. Discover how you can grow your career, make impact and drive real change with our Winning Team today.

**Working Arrangement**

Hybrid

**The Opportunity**

This position will be assisting the Chief Risk Officer in the managing of Information and Technology Risk Management for Manulife Insurance Berhad in alignment with the mandates and objectives from Global/Asia Information Risk Management (IRM) and regulatory requirements, as well as ensuring the company is compliant with the standards and guidelines of BNM Risk Management in Information Technology (RMIT) policy document.

**What motivates you?**
- You obsess about customers, listen, engage and act for their benefit
- You think big, with curiosity to discover ways to use your agile mindset and enable business outcomes
- You thrive in teams, and enjoy getting things done together
- You take ownership and build solutions, focusing on what matters
- You do what is right, work with integrity and speak up
- You share your humanity, helping us build a diverse and inclusive work environment for everyone

**We are looking for someone with**:

- Holds a bachelor’s degree in Information Technology (IT) or Information Security (IS)
- 5 years’ experience in IRM / Information Security related roles within the financial industry
- Excellent technical skills in Technology Risk Management (TRM) and Information Security Management (ISM)
- Excellent communication skills
- Appreciation of different cultures
- Professional certificate holder - CISSP, CRISC, CISA, CSSLP, or CISM and/or others
- Experience in the following will be added advantage -Information Risk Assessment, IT/IS security controls review and Business continuity and disaster recovery

**On the job you will**:

- Participate in governance of information risk management as 2nd Line oversight function to support the implementation of internal risk framework, practices, and controls.
- Perform the 2nd Line IRM oversight on the Technology RCSA program, issues and the associated corrective action plan, and incidents.
- Keep apprised of current and emerging risks which could potentially affect the company’s risk profile.
- Provide guidance and support on implementation of global technology initiatives.
- Provide advisory and guidance on local information, cybersecurity and technology operational activities and regulatory risk to business.
- Work closely with Asia IRM to ensure IRM assessment/s is/are aligned with Manulife Global Standards.
- Work closely with local IT Governance to ensure holistic incident management, ensuring adequate communication, response and handling in the event of information/security risk incident/s and report to the management and regulator, if required.
- Work closely with relevant stakeholders to assess privacy incidents, Data Leak Prevention (DLP) cases etc. and escalate to the management and regulator, if required.
- Assume the Chief Information Security Officer (CISO) role and responsible for the technology risk management function of the financial institution and ensuring the company is compliant with BNM Risk Management in Information Technology (RMIT) policy document.
- Advise on critical technology projects and ensuring critical issues that may have an impact on the company’s risk tolerance are adequately deliberated or escalated in a timely manner.
- Provide independent views to the board and senior management on third party assessments per RMIT and deliberate the outcome to the Board.
- Conduct 2nd line review of cloud risk assessment of initiatives/projects involving cloud adoption and consider key risks and control measures (specified in RMIT Appendix 10) for BNM review and consultation sessions.
- Perform periodic gap analysis of existing practices in managing technology risk against RMIT requirements and highlight key implementation gaps and ensure the company maintains continuous compliance.
- Responsible for ensuring the company’s information assets and technologies are adequately protected, which includes formulating appropriate policies for the effective implementation of TRMF and CRF, enforcing compliance with these policies, frameworks, and other technology-related regulatory requirements; and advising senior management on technology risk and security matters, including developments in the financial institution’s technology security risk profile in relation to its business and operations.

**What can we offer you?**
- A competitive salary and benefits packages.
- A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new sk

  • Information Risk Management Lead

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Manulife Full time

    We are a leading financial services provider committed to making decisions easier and lives better for our customers and colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. To help us stand out, we help you step up, because when colleagues are healthy, respected and...

  • Information Security Lead

    4 days ago

    Kuala Lumpur, Malaysia bp Full time

    Location - Malaysia - Kuala Lumpur - Travel required - No travel is expected with this role - Job category - Digital & technology - Relocation available - This role is not eligible for relocation - Job type - Professionals - Job code - RQ066706 - Experience level - Senior Job summary **Entity**: Innovation & Engineering **Job Family Group**: IT&S...

  • Information Security Lead

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia bp Full time

    Location Malaysia Kuala Lumpur Travel required No travel is expected with this role Job category Digital & technology Relocation available This role is not eligible for relocation Job type Professionals Job code RQ06670 Experience level SeniorJob summaryEntity:Innovation & EngineeringJob Family Group:IT&S GroupJob Summary:Responsible for delivering...

  • Lead Technology Risk

    1 week ago

    Kuala Lumpur, Malaysia YTL-Sea Digital Bank Project Full time

    Lead Technology Risk - Are you ready to take your career to new heights and play a pivotal role in safeguarding our organization's technological landscape? - We're on the lookout for a dynamic individual to join our team and lead the charge in implementing cutting-edge Technology Risk Management (TRM) initiatives. - As a member of our esteemed team, you'll...

  • Information Security Lead

    5 days ago

    Kuala Lumpur, Malaysia bp Full time

    Job summary **Entity**: Innovation & Engineering **Job Family Group**: IT&S Group **Job Summary**: Why Join Us? We have embarked on a new and ambitious strategy, to deliver on its net-zero ambition and to drive efficiency and new business models, by using digital technologies! It’s an exciting time to embark on your journey with bp as we undergo...

  • Information Security Lead

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia bp Full time

    Job summaryEntity:Innovation & EngineeringJob Family Group:IT&S GroupJob Summary:Why Join Us?We have embarked on a new and ambitious strategy, to deliver on its net-zero ambition and to drive efficiency and new business models, by using digital technologiesIt's an exciting time to embark on your journey with bp as we undergo technology transformation and...

  • Lead Tech Risk Compliance

    1 week ago

    Kuala Lumpur, Malaysia YTL-Sea Digital Bank Project Full time

    **About the Team**: Are you eager to elevate your career to new heights? Join us for an exhilarating opportunity to pioneer our groundbreaking digital bank project, where boundless possibilities await! We're thrilled to extend an invitation for you to join our vibrant team of visionaries, innovators, and trailblazers. As a **Technology Risk and Compliance...

  • Commodity Risk Lead

    2 weeks ago

    Kuala Lumpur, Malaysia bp Full time

    Location - Malaysia - Kuala Lumpur - Travel required - No travel is expected with this role - Job category - Finance - Relocation available - This role is not eligible for relocation - Job type - Professionals - Job code - RQ066697 - Experience level - Intermediate Job summary **Entity**: Finance **Job Family Group**: Finance Group **Job...

  • Manager - Risk Management

    1 week ago

    Kuala Lumpur, Malaysia Hong Leong Bank Full time

    If you are looking to excel and make a difference, take a closer look at us 1. IT Risk Management Framework & IT Policies - Assist to enhance and implement bank-wide IT Risk Management Framework - Review and provide advisory on adequacy of IT policies and procedures 2. IT Project Risk Analysis - Review and enhance IT Risk Assessment (ITRA) template -...

  • Commodity Risk Lead

    6 days ago

    Kuala Lumpur, Malaysia bp Full time

    Location - Malaysia - Kuala Lumpur - Travel required - No travel is expected with this role - Job category - Finance - Relocation available - This role is not eligible for relocation - Job type - Professionals - Job code - RQ071500 - Experience level - Intermediate Job summary **Entity**: Finance **Job Family Group**: Finance Group **Job...

  • Director, IT Risk Management

    2 weeks ago

    Kuala Lumpur, Malaysia Affin Bank Full time

    Director, IT Risk Management **Create your future with Affin! You too can make a difference.** Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don't just stay at the forefront of the industry - you can make a difference too. **Position Objective** - Responsible for the preparation and review of...

  • Manager - Risk Management

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Hong Leong Bank Full time

    If you are looking to excel and make a difference, take a closer look at usIT Risk Management Framework & IT Policies Assist to enhance and implement bankwide IT Risk Management Framework Review and provide advisory on adequacy of IT policies and proceduresIT Project Risk Analysis Review and enhance IT Risk Assessment (ITRA) template Perform IT risk review...

  • Commodity Risk Lead

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia bp Full time

    Location Malaysia Kuala Lumpur Travel required No travel is expected with this role Job category Finance Relocation available This role is not eligible for relocation Job type Professionals Job code RQ071500 Experience level IntermediateJob summaryEntity:FinanceJob Family Group:Finance GroupJob Summary:Commodity Risk Lead is a key strategic control position...

  • Merchant Risk Lead

    3 weeks ago

    Kuala Lumpur, Malaysia Shopee Full time

    DepartmentOperations- LevelExperienced (Team Lead)- LocationMalaysia - Kuala LumpurThe Operation teams at Shopee covers the operational end-to-end process, from when the buyer searches for a product listed on the Shopee platform, to the moment the buyer receives the products. The team analyses and monitors operational KPIs across the region and conducts root...

  • Director, IT Risk Management

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Affin Bank Full time

    Director, IT Risk ManagementCreate your future with Affin You too can make a difference.Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don't just stay at the forefront of the industry - you can make a difference too.Position Objective Responsible for the preparation and review of technology risk...

  • IT Risk Manager

    3 months ago

    Kuala Lumpur, Malaysia Adecco Malaysia Full time

    Full Time, Permanent - Attractive Remuneration Package - Career Growth Well established Financial Service Industry leader looking for IT/Cyber Risk SME to work on IT risk management programs and conduct IT risk assessment **Responsibilities**: - Develop and implement IT risk management programs and activities. - Conduct IT risk assessment including...

  • Group Risk Management Manager

    3 weeks ago

    Kuala Lumpur, Malaysia Warisan TC Management Service Sdn Bhd Full time

    **1st Job Responsibilities**: Assist Head of Group Risk Management/ Group Integrity Officer to facilitate the implementation of the risk management initiatives and Anti-Bribery and Anti-Corruption ("ABAC") Policy across the Warisan TC Holdings Berhad group of companies ("Group"). **Responsibilities**: - Execute the assigned Risk Management initiatives...

  • Group Risk Management Manager

    4 weeks ago

    Kuala Lumpur, Malaysia Warisan TC Management Service Sdn Bhd Full time

    **1st Job Responsibilities**: Assist Head of Group Risk Management/ Group Integrity Officer to facilitate the implementation of the risk management initiatives and Anti-Bribery and Anti-Corruption ("ABAC") Policy across the Warisan TC Holdings Berhad group of companies ("Group"). **Responsibilities**: - Execute the assigned Risk Management initiatives...

  • Information Security Manager

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Airswift Full time

    Information Security (InfoSec) ManagerOur client is a Transportation and Supply Chain MNC and they are looking to add some leadership to their Information Security Team in Malaysia.This individual will be an integral part of the Information Technology organization reporting to the IT Infrastructure Manager to help improve and communicate the maturity levels...

  • Assurance Manager

    1 month ago

    Kuala Lumpur, Malaysia BP Business Service Centre Asia Sdn Bhd Full time

    Job Summary Job Description: Global Business Services (GBS) is BP’s process operation and transformation organization. We operate a global delivery model consisting of BP-owned and operated centers worldwide. GBS enhances value by standardizing, modernizing, and digitizing activities and driving commercial value, whilst maintaining a robust control...