Assistant Manager, Governance, Risk & Compliance

NUR Power; Puchong; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading power company in Selangor, Malaysia, is seeking an Assistant Manager for Governance, Risk & Compliance (GRC). This role supports the development and execution of compliance and risk management frameworks, ensuring effective internal controls and adherence to regulations. The ideal candidate should possess a bachelor's degree, relevant certifications, and 6-8 years of experience in compliance or risk management. Strong analytical skills and the ability to engage cross-functional teams are essential for success. Join us to promote a strong compliance culture and effective risk oversight.

Qualifications

• 6-8 years of experience in compliance or risk management roles.
• Experience with regulatory bodies in highly regulated environments.
• Ability to work independently and handle multiple responsibilities.

Responsibilities

• Lead the development of governance and compliance frameworks.
• Conduct internal compliance audits and report findings.
• Contribute to the corporate risk register and risk assessments.

Skills

Compliance knowledge

Risk management

Analytical skills

Regulatory knowledge

Communication skills

Education

Bachelor's degree in Finance, Law, Accounting, Business Administration, or related field

Certification in compliance or risk management

Job description

Job Summary:

The Assistant Manager, Governance, Risk & Compliance (GRC) supports the development and execution of the company’s compliance, risk management, and governance frameworks. The role ensures that internal controls are effective, regulatory obligations are met, and enterprise risks are identified, assessed, and mitigated in alignment with company policies and legal requirements. This position acts as a key liaison between departments to promote a strong compliance culture and effective risk oversight.

Key Responsibilities:

Governance & Compliance

• Lead the development, implementation, and upkeep of governance and compliance frameworks, policies, and procedures across the organisation.
• Ensure adherence to financial laws, tax regulations, and reporting standards set by the shareholder company and regulatory authorities.
• Monitor regulatory developments and assist in interpreting and applying relevant laws and regulations (e.g., tax, financial reporting, anti‑bribery, AML).
• Support company‑wide compliance with internal controls, code of conduct, and corporate governance requirements.
• Maintain registers for statutory and regulatory compliance activities (e.g., conflict of interest, gifts, regulatory filings).

Risk Management

• Contribute to the identification, analysis, and evaluation of operational, strategic, financial, and regulatory risks.
• Establish and maintain the corporate risk register identifying key risks and mitigation strategies across all business areas.
• Conduct periodic risk assessments and work directly with management and department heads to ensure risks are appropriately addressed.
• Lead initiatives and programme in embedding a risk‑aware culture across the company.

Audit & Monitoring

• Conduct internal compliance audits, reviews, and assessments to identify gaps and recommend corrective actions.
• Report findings to senior management, follow up on corrective actions, and track the closure of audit issues.
• Ensure accurate, timely reporting of compliance and risk matters, and maintain required documentation for audit readiness.

Stakeholder Engagement & Training

• Serve as the sole point of contact for all matters related to GRC, including liaising with regulatory bodies, auditors, and legal counsel.
• Develop and deliver GRC‑related awareness and training initiatives across departments.
• Provide guidance and advisory support to internal stakeholders on compliance obligations and risk controls.

Requirements:

Education & Qualifications

• Bachelor's degree in Finance, Law, Accounting, Business Administration, or a related field.
• Certification in compliance, risk management, or internal audit (e.g., ICA, CCSA, CRMA, ISO 31000) is an added advantage.

Experience

• Minimum 6‑8 years’ experience in compliance, risk management, governance, or internal audit.
• Experience working with regulatory bodies or in highly regulated environments is preferred.
• Proven ability to work independently in a standalone capacity, with both strategic thinking and hands‑on execution.

Skills & Competencies

• Solid understanding of compliance, internal control, and risk management frameworks.
• Demonstrated ability to work independently, manage multiple responsibilities, and engage cross‑functional stakeholders.
• Strong working knowledge of regulatory frameworks and risk management principles.
• Strong analytical, investigative, and problem‑solving skills.
• Excellent communication skills with the ability to engage cross‑functional teams.
• High ethical standards, integrity, and sound judgment.