Manager, IT Governance

Manager, IT Governance

Strengthen and Lead the Organization's IT Governance, Compliance & Cybersecurity Framework

We are seeking an experienced Manager, IT Governance to enhance our organization's governance, compliance, and cybersecurity posture. This role is critical in safeguarding digital assets, ensuring regulatory compliance, and maintaining a strong IT control environment that supports business operations.

You will lead governance frameworks, IT audits, cybersecurity initiatives, and risk management activities while collaborating closely with IT, Risk, Legal, and business units.

Key Responsibilities1. IT Governance & Compliance

• Develop and maintain IT governance frameworks, policies, and standards aligned with ISO 27001, COBIT, ITIL, and other best-practice frameworks.
• Ensure IT processes, controls, and governance practices comply with internal policies and regulatory requirements (PDPA, BNM RMiT, GDPR).
• Conduct regular IT risk assessments and ensure mitigation plans are implemented.
• Ensure continuous compliance across the organization.

2. IT Audit & Risk Management

• Plan and execute internal IT audits, ensuring audit issues are addressed on time.
• Support internal and external auditors in IT and cybersecurity audit activities.
• Develop IT control matrices and conduct testing to ensure control effectiveness.
• Monitor IT risk indicators and prepare risk, audit, and compliance reports.

3. Cybersecurity Management

• Oversee cybersecurity strategies to protect systems, networks, and data assets.
• Manage vulnerability assessments, penetration testing, and cybersecurity incident responses.
• Work closely with technical teams to implement access controls and security measures.
• Promote cybersecurity awareness and conduct training for employees.

4. IT Policy, Process & Performance

• Develop and update IT policies, SOPs, and governance processes.
• Define and monitor KPIs, SLAs, and performance metrics related to governance.

• Support digital transformation initiatives through embedded governance practices.

• Stakeholder Engagement & Reporting

• Prepare governance, cybersecurity, and audit reports for management.

• Advise leadership on IT risk posture and recommend control improvements.
• Collaborate with IT, Risk, Legal, and Business units to ensure governance alignment.

What You'll Bring

Essential

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 7–10 years of experience in IT governance, IT audit, or cybersecurity, with hands-on involvement in controls, compliance, and risk management.
• Strong understanding of governance frameworks such as ISO 27001, COBIT, ITIL, and IT general controls (ITGC).
• Proven experience managing IT audits, regulatory compliance (PDPA, BNM RMiT), and risk assessments.
• Solid capability in stakeholder management, cross-functional collaboration, and driving governance adoption across teams.
• Excellent analytical thinking, communication, decision-making, and problem-solving skills.

Why Join Warisan TC Holdings

• 5 working days (Monday to Friday)
• Car allowance provided
• Annual leave entitlement
• Comprehensive medical coverage for employee
• Group term life & personal accident insurance
• Access to internal training programmes for technical, leadership, and professional development
• Strong career growth opportunities

Ready to Architect the Future of Enterprise IT?

Apply now with your CV and salary expectations.

Job Type: Full-time

Pay: RM7, RM10,000.00 per month

Benefits:

• Health insurance
• Maternity leave
• Opportunities for promotion
• Professional development

Ability to commute/relocate:

• Kuala Lumpur: Reliably commute or planning to relocate before starting work (Preferred)

Application Question(s):

• How long is your notice period?
• What is your expected salary? Please state the range.
• Are you a Malaysian?

Education:

• Bachelor's (Preferred)

Experience:

• IT Governance: 3 years (Preferred)
• MDM/PMO: 3 years (Preferred)

Location:

• Kuala Lumpur (Preferred)

Work Location: In person