Information Security Risk Manager

6 days ago


Kuala Lumpur, Kuala Lumpur, Malaysia BTI Executive Search Full time

Company Overview

BTI Executive Search is a leading provider of executive search services for the financial services industry. We specialize in identifying and attracting top talent for our clients.

Job Description

The Senior IT Audit Specialist will be responsible for evaluating the effectiveness and efficiency of technology internal controls in accordance with regulatory expectations and best practices. This includes risk management, information security, data security, network security, and cyber security best practices.

The ideal candidate will have a proven track record in performing IT audits, particularly in IT security portfolios in sizeable or multinational companies. They should also have experience in banking or financial services, fintech, e-commerce, or technology-based companies.

Required Skills and Qualifications

  • University degree and relevant professional qualifications (e.g. CISM, CISA, CISSP, CREST, GPEN or equivalent).
  • Certified Ethical Hacker (CEH) is a plus.
  • At least 8-10 years of relevant experience in IT auditing.
  • Well-versed with BNM Requirements on tech/IT/InfoSec and ISO 27001 Standards Requirements.
  • Knowledge in Data Security, Cyber Security, Security Architecture & Information Security Governance, Network Security, Business Continuity Management (BCM).
  • Proficiency in Excel and Computer Assisted Audit Technique (CAAT) or analytic tools (ACL, IDEA, Tableau, Python etc.) is a plus.
  • Experience in Cloud computing is a plus.

Benefits

Our company offers a competitive salary and benefits package to our employees.



  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Full time

    About AllianzAs a leading international financial services provider, Allianz offers a wide range of products and solutions in insurance and asset management. Our company is built on the principles of trust, stability, and security.The Regional Information Security Officer (RISO) APAC is a key role within our global IS organization. This position is...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Petron Malaysia Refining & Marketing Bhd Full time

    Petron Malaysia Refining & Marketing Bhd is looking for a skilled Information Security Manager to oversee the development, implementation, and maintenance of our information security framework. This includes ensuring that our information security controls, processes, and solutions are aligned with current business needs and relevant regulatory...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Touch 'n Go Group Full time

    Touch 'n Go Group is a leading digital payments and mobility solutions provider. We are seeking an experienced Cybersecurity Leader to join our team.The Head of Information Security will be responsible for the technology risk management function of Touch 'n Go Sdn. Bhd. This role requires a strong background in IT security, with experience in risk...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Warisan TC Holdings Bhd Full time

    Job DescriptionWe are seeking a highly skilled Cybersecurity Risk Manager to join our team. As a key member of our Information Security team, you will be responsible for ensuring that our company's IT infrastructure and systems comply with relevant regulatory requirements and industry standards.The successful candidate will have a strong background in risk...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Petron Malaysia Refining & Marketing Bhd Full time

    Job SummaryPetron Malaysia Refining & Marketing Bhd is seeking a highly skilled professional to develop, implement, and manage our Information Security Governance, Risk Management, and Compliance (GRC) programs. As a GRC Program Developer, you will be responsible for ensuring that our information security controls, processes, and solutions are clearly...


  • Kuala Lumpur, Kuala Lumpur, Malaysia VF Corporation Full time

    About This RoleThis is a senior-level position within our organization, reporting directly to the Global Cyber Security Team. The ideal candidate will possess a strong background in information security risk management, IT audit, and/or IT controls design and implementation.The selected candidate will have the opportunity to work closely with...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Aeon Credit Service Full time

    About the roleWe are seeking a highly skilled and experienced Manager, Information Security to join our team at AEON Credit Service (M) Bhd in Bangsar South, Kuala Lumpur. This is a full-time position that plays a crucial role in maintaining the security and integrity of our information systems and infrastructure.What you'll be doingDeveloping and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Michael Page Full time

    About This OpportunityThis exciting opportunity allows you to leverage your expertise in IT Security to lead the development and execution of our client's security strategy.Ensure the safeguarding of the client's information through comprehensive security measures.Serve as the authority on the creation and enforcement of security strategies, standards, and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    About the Role:Boost is hiring an Information Security Compliance Manager to lead the company's Information Security Compliance Program.This individual will ensure the organization's compliance with relevant regulatory standards, including BNM RMiT, BNM MCIPD, NIST, and PCI DSS.Develop and implement policies and procedures for managing information security...


  • Kuala Lumpur, Kuala Lumpur, Malaysia StashAway Full time

    About the RoleThe Information Security Specialist will play a vital compliance and oversight role on our Technology team, ensuring the highest levels of systems and infrastructure availability.Key ResponsibilitiesEnsure compliance to regulator's Technology Risk Management guidelines and Personal Data Protection Laws group-wide.Develop and maintain Key Risk...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Full time

    Job DescriptionCybersecurity and Business Continuity ExpertThis role requires an experienced professional to oversee information security risk at Allianz Insurance Singapore (AIS). The successful candidate will be responsible for ensuring AIS is well-prepared for potential threats and incidents.The ideal candidate will have a strong understanding of...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Dentsu Aegis Network Ltd. Full time

    The Information Security Assurance Professional will be responsible for conducting thorough security risk assessments of third-party vendors and developing strategies to mitigate identified risks.Key responsibilities include:Conducting security risk assessments using industry-recognized frameworks.Developing and maintaining relationships with business...


  • Kuala Lumpur, Kuala Lumpur, Malaysia National Oilwell Varco Full time

    About National Oilwell VarcoWe are a global leader in the oil and gas industry, providing innovative solutions to help our customers achieve their goals. Our company is built on a foundation of excellence, innovation, and teamwork.Our team is passionate about information security and is committed to ensuring the confidentiality, integrity, and availability...


  • Kuala Lumpur, Kuala Lumpur, Malaysia National Oilwell Varco Full time

    About UsNational Oilwell Varco is a leading provider of innovative solutions for the oil and gas industry. Our company is dedicated to delivering exceptional results and building long-lasting relationships with our customers.Our team is passionate about information security and is committed to ensuring the confidentiality, integrity, and availability of our...


  • Kuala Lumpur, Kuala Lumpur, Malaysia GREAT EASTERN Full time

    About the Job:We are seeking an experienced IT Risk Management Professional to join our team as AVP, Technology Risk Management.About the Role:The role involves managing IT risks identification, mitigation, and monitoring, developing/reviewing technology-related frameworks, policies, and guidelines, and conducting related training and awareness programs.IT...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Telekom Malaysia Full time

    About the JobThis is a mid-senior level position requiring a strong background in information security and risk management. The successful candidate will be responsible for managing and leading forensic investigations and analysis of electronic evidence, as well as developing security operational improvements and initiatives.Responsibilities:Manage and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Full time

    About the RoleWe are seeking an experienced Information Security professional to lead our APAC region. The successful candidate will be responsible for overseeing ISMS activities, identifying and assessing risks, and providing advice to regional management and local IS functions on information security matters.ResponsibilitiesLead the regional Information...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Full time

    About the JobThis role requires an experienced Information Security professional to lead our APAC region. The successful candidate will be responsible for overseeing ISMS activities, identifying and assessing risks, and providing advice to regional management and local IS functions on information security matters.Key ResponsibilitiesLead the regional...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Dentsu Aegis Network Full time

    About Dentsu Aegis NetworkDentsu Aegis Network is a leading network of agencies that help clients predict and plan for disruptive future opportunities and create new paths to growth in the sustainable economy.We take a people-centered approach to business transformation, using insights to connect brand, content, commerce, and experience, underpinned by...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Finexus Group Full time

    About UsFinexus Group provides SaaS services including infrastructure, platform, and business processing outsourcing for the banking and financial industry.Job OverviewThis role involves overseeing overall development, implementation, and maintenance of security systems within the organization. You will work closely with all levels of the organization to...