Information Security Governance Specialist

5 days ago


Kuala Lumpur, Kuala Lumpur, Malaysia Petron Malaysia Full time

Job Overview

We are seeking a highly skilled Information Security Governance Specialist to join our team. The ideal candidate will be responsible for developing, implementing, and managing the organization's Information Security Governance, Risk Management, and Compliance (GRC) programs.

The successful candidate will ensure that information security controls, processes, and solutions are clearly defined and effectively implemented, aligning with current business needs and relevant regulatory standards, including NIST CSF, PCI DSS, BNM RMiT, and ISO/IEC 27001 Standards.

  • Main Responsibilities:
  • Lead and continuously improve information security control policies, procedures, and guidelines in line with regulatory, ISMS requirements, and industry best practices.
  • Facilitate periodic reviews of information security control policies, procedures, and guidelines.
  • Promote awareness and publish IT security bulletins on cybersecurity topics.
  • Provide and facilitate training on governance, compliance, risk management, and security-related matters.
  • Develop and implement security policies, procedures, and guidelines for all business entities and users.
  • Regularly update and maintain the risk register within the GRC platform.
  • Develop and maintain change management processes, procedures, and guidelines.
  • Lead and manage internal and external audits, and compliance reviews related to information security.
  • Oversee the lifecycle of all technology changes and manage third-party security assessments.
  • Evaluate and manage third-party risks, generate compliance reports, and assist with budget planning and expenditure compliance.


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Popular SL. Full time

    About the RoleWe are seeking a highly skilled Senior Information Security Specialist to join our Protection & Resilience team at Allianz Services. The successful candidate will be responsible for overseeing the identification, assessment, and mitigation of risks to ensure smooth operations of Allianz entities.This role requires strong expertise in...


  • Kuala Lumpur, Kuala Lumpur, Malaysia SWIFT Full time

    About the RoleTo provide expert input to security strategy and control of systems, networks, physical infrastructure, people, and information. To organize the design, communication, and execution of policies/controls/procedures as appropriate for Swift and its customers, and as consistent with the company objectives, company reputation, and regulatory...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Clarks Full time

    Job DescriptionWe are seeking a highly experienced Security Governance Specialist to join our team at Clarks. This is an exciting opportunity for a skilled professional to lead the development and operation of security and IT risk management activities within our organization.Key ResponsibilitiesDevelop and maintain effective controls to ensure compliance...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    Information Security Governance, Risk and Compliance, Asst. ManagerBoost WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, MalaysiaResponsibilities:Information Security GovernanceAccountable for the regular review of IT governance, processes and control mechanisms to ensure its relevancy with the business practices, risk management and compliance...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Abhidi Solution Full time

    We are looking for a highly skilled Information Security Specialist to join our team at Abhidi Solution. In this role, you will be responsible for identifying and mitigating potential security risks, as well as implementing effective security measures to protect our systems and data.The ideal candidate will have at least 3 years of experience in a similar...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Popular SL. Full time

    Allianz Services is part of Allianz Group, one of the world's leading insurers and asset managers and has succeeded in becoming one individual business segment by combining various businesses from different parent companies. Allianz Services is running service delivery operations in Romania, India, Mauritius and Morocco as well as is operating Consulting...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Dentsu Aegis Network Ltd. Full time

    Dentsu Aegis Network Ltd. is the network designed for what's next, helping clients predict and plan for disruptive future opportunities and create new paths to growth in the sustainable economy.Job DescriptionWe are seeking a highly skilled Information Security Specialist to join our expanding Global Third Party Security team.The successful candidate will...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    About the RoleThis senior-level position requires a skilled professional with extensive experience in information security governance, risk management, and compliance. The successful candidate will be responsible for driving information security projects, managing risk, and ensuring compliance with regulatory requirements.Key responsibilities include...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Allianz Popular SL. Full time

    Job DescriptionAllianz Services is a leading provider of insurance and asset management solutions, with operations in Romania, India, Mauritius, and Morocco. We are seeking a highly skilled Senior Information Security Specialist to join our Protection & Resilience team.The successful candidate will be responsible for overseeing the identification,...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Businesslist Full time

    Information Security & Cloud Engineer Posting Date: 26 Mar 2025 | Close Date: 24 Jun 2025Company Background: Malaysia's leading Software specialist company that develops and provides customized software solutions with high quality, web application development, online marketing, and maintenance services for multinational corporations, huge businesses, as well...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Boost Full time

    Boost, a pioneering organization in the financial services sector, seeks an exceptional individual to fill the role of Information Security Governance, Risk and Compliance, Asst. Manager.About the JobThis exciting opportunity is focused on driving information security governance, risk management, and compliance within our organization. As a key member of our...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Abhidi Solutions Full time

    Job ResponsibilitiesThe selected candidate will lead the security team at an onsite customer location, acting as the primary point of contact for all customer queries related to security.They must have more than 7 years of experience in Cyber Security and be proficient in Governance, Risk and Compliance, Security Architecture, IAM, Secured SDLC, Security...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Ørsted Full time

    The APAC Information Security Director will play a critical role in leading our security team and driving strategic initiatives to mitigate cyber risk. You will be responsible for evaluating, enhancing, and executing a comprehensive information security strategy aligned with the global cybersecurity strategy and Ørsted APAC business objectives and risk...


  • Kuala Lumpur, Kuala Lumpur, Malaysia iPay88 Full time

    Job DescriptioniPay88 is seeking a highly experienced Chief Information Security Officer to lead our information security strategy and drive the implementation of technology risk initiatives that align with our company's strategic goals.The successful candidate will be responsible for ensuring global, regional, and local standards are adhered to in the...


  • Kuala Lumpur, Kuala Lumpur, Malaysia iPay88 Full time

    About the RoleiPay88 is seeking a highly experienced Chief Information Security Officer to lead our information security strategy and drive the implementation of technology risk initiatives that align with our company's strategic goals.The successful candidate will be responsible for ensuring global, regional, and local standards are adhered to in the...


  • Kuala Lumpur, Kuala Lumpur, Malaysia OCBC Bank Full time

    Job DescriptionThe OCBC Bank is seeking an experienced IT Governance Specialist to join its Project Management Office. This role will play a key part in establishing, implementing, and maintaining the IT Project Management framework, standards, and best practices.The successful candidate will assist in governing standards across all IT projects within the...

  • IT Governance

    3 days ago


    Kuala Lumpur, Kuala Lumpur, Malaysia OCBC Bank Full time

    Job Description - IT Governance & Control Specialist (240001OM)IT Governance & Control Specialist - (240001OM)Responsibilities:Establish, implement, and maintain the IT Project Management framework, standards, and best practices. This includes periodic reviews of processes and templates, conducting impact assessments, and securing stakeholder buy-in and...

  • IT Governance

    3 days ago


    Kuala Lumpur, Kuala Lumpur, Malaysia OCBC Bank Full time

    Job Description - IT Governance & Control Specialist (240001OM)IT Governance & Control Specialist - (240001OM)Responsibilities:Establish, implement, and maintain the IT Project Management framework, standards, and best practices. This includes periodic reviews of processes and templates, conducting impact assessments, and securing stakeholder buy-in and...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Mott MacDonald Full time

    The APNA Information Security Team is responsible for information security strategy, risk management, assurance and capability development to support our regional business.The role will report directly to the Regional Information Technology & Security (RITS) Manager for Asia Pacific, New Zealand and Australia (APNA) and provides an opportunity to obtain...


  • Kuala Lumpur, Kuala Lumpur, Malaysia Ørsted AS Full time

    Join us in this role where you'll spearhead executive engagement, oversee CIS initiatives, and guide the business on the CIS strategy for our operations across APAC. You'll deliver CIS/cybersecurity briefings to legal entity boards, risk committees, and operations committees, while also representing CIS in regional projects, audits, and regulatory...