Associate Director, IT Governance, Risk and Compliance

DKSH; Kuala Lumpur; Presencial; MYR 240.000 - 360.000; Jornada completa

Descripción de la vacante

DKSH seeks an Associate Director, IT Governance, Risk and Compliance (GRC) to lead the enterprise cybersecurity posture and governance maturity. You will drive IT GRC practices, align with global standards, and manage technology risk with precision.

You will build and lead a team of cybersecurity professionals, develop policies and procedures, and ensure audit-ready ISO 27001 compliance across the organization.

Formación

• Bachelor's degree in Computing, Information Technology, or equivalent.
• 10+ years of experience in IT governance, risk, and compliance with 5+ years in a leadership role.
• Deep expertise in IT GRC frameworks, policy management, risk practices, and IT GRC tools.

Responsabilidades

• Define and drive strategic direction for DKSH IT GRC, improving governance maturity.
• Lead and develop a cybersecurity team and embed IT GRC across the enterprise.
• Own development, implementation, and validation of cybersecurity policies and standards.
• Lead ISO 27001 compliance program and maintain audit readiness.
• Define IT Risk and Internal Controls Frameworks and drive risk mitigation.
• Champion a center of excellence for cybersecurity management and continuous improvement.
• Provide clear reporting to senior leadership on controls and risk exposure.
• Oversee information security risk assessments and controls selection.

Conocimientos

IT governance

Policy management

Risk management

Team leadership

Communication

Independent work

Educación

Bachelor's degree in Computing or IT

Herramientas

IT GRC tools

Active Directory

Windows

Linux

DNS/DHCP

IPS

EDR

Virtualization

Descripción del empleo

As the Associate Director, IT Governance, Risk and Compliance (GRC), you play a pivotal leadership role in shaping DKSH's enterprise cybersecurity posture and ensuring robust governance across the organization. You drive the maturity of IT GRC practices, enabling DKSH to operate securely, meet global compliance standards, and manage technology risk with confidence and precision.

What You Will Deliver

• Define and drive the strategic direction for DKSH's IT GRC function, ensuring alignment with organizational priorities and delivering measurable improvements in governance maturity.
• Lead and develop a team of cybersecurity professionals, building and operationalizing IT GRC practices that are effective, scalable, and embedded across the enterprise.
• Own the end-to-end development, implementation, and validation of cybersecurity policies, standards, procedures, and guidelines that strengthen DKSH's overall security posture.
• Lead and sustain DKSH's ISO 27001 compliance and certification program, ensuring controls remain effective and audit-ready at all times.
• Define and implement the IT Risk Framework and Internal Controls Assessment Framework, driving a proactive technology risk mitigation program across the organization.
• Champion a center of excellence for cybersecurity management, fostering continuous improvement and optimization of security solutions and processes.
• Deliver clear, actionable reporting to senior leadership on controls effectiveness, operational efficiencies, and risk exposure.
• Lead information security risk assessments and guide controls selection to reduce the organization's exposure to evolving cyber threats.
• Oversee compliance monitoring activities to ensure adherence to ISO 27001 practices, internal security policies, and applicable laws and regulations.
• Lead client contract reviews and support the Request for Proposal (RFP) process and contract management for IT-related matters.
• Support information security incident investigations and post-incident reviews from an IT GRC perspective, ensuring lessons learned are captured and acted upon.
• Lead security awareness and training programs that equip stakeholders with the knowledge to uphold DKSH's security standards.
• Stay current on emerging security and privacy legislation, regulations, adversaries, and vulnerabilities to ensure DKSH's defenses remain ahead of the threat landscape.

What You Bring

• Bachelor's degree in Computing, Information Technology, or an equivalent discipline.
• At least 10 years of experience in a similar role, with a minimum of 5 years in a management position.
• Deep expertise in IT governance frameworks, policy management, risk management practices, and IT GRC tools.
• Familiarity with IT infrastructure and solutions, including Windows and Linux operating systems, Active Directory (AD), Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), Intrusion Prevention Systems (IPS), Endpoint Detection and Response (EDR), routers, switches, and virtualization environments, is advantageous.
• Proven ability to manage complex, large-scale, remote environments spanning diverse cultures and time zones.
• Strong sense of ownership and initiative in identifying, improving, and optimizing processes and closing operational gaps.
• Excellent written and verbal communication skills, with the ability to convey security and risk-related concepts clearly to both technical and non-technical stakeholders.
• Demonstrated ability to work independently while collaborating effectively with diverse, multi-stakeholder teams.

Why Join DKSH

At DKSH, we help companies grow in Asia and enable people to perform at their best. You will be part of an organization that values accountability, collaboration, and long-term partnerships. We offer a dynamic environment where your contributions are visible and where you can build a meaningful career in IT Governance, Risk and Compliance.