Chief Technology Risk & Cyber Resilience Leader

AmBank Group; Kampung Malaysia Tambahan; On-site; MYR 150,000 - 210,000; Full time

Job summary

AmBank Group is seeking a VP, Technology Risk Management & Advisory to provide independent oversight on technology and cyber risks across the Bank. The role partners with business units and IT to validate controls, conduct risk assessments, and strengthen cyber resilience in line with regulatory guidelines.

The incumbent will lead risk assessments, advise on mitigation strategies, and drive improvements in control maturity while aligning with the Group CISO's strategy and reporting cycles.

Qualifications

• Bachelor’s Degree in Information Systems, Information Technology or related field.
• 10 years’ experience in technology risk, governance, audit, compliance or information security.
• Knowledge of COBIT, ISF, NIST RMF, ISO 27001 and NIST CSF standards.
• Experience with regulatory requirements such as BNM RMiT, SC Management of Cyber Risk, PayNet guidelines.
• Strong communication and stakeholder engagement across levels.
• Professional Certifications e.g.: CISM, CRISC or ISO 27001 recommended.

Responsibilities

• Plan, govern and implement IT risk frameworks, policies and guidelines.
• Provide risk assessments, advisory support and governance oversight.
• Lead red team planning aligned to cyber risk strategy and campaigns.
• Ensure conformance to regulatory guidelines and drive risk reporting cycles.
• Collaborate with CISO, business units and first line of defense on risk matters.

Skills

Analytical thinking

Strong communication

Stakeholder engagement

Multi-tasking

Problem solving

Collaboration

Education

Bachelor’s Degree in Information Systems/IT

Job description

AmBank Group is seeking a VP, Technology Risk Management & Advisory to provide independent oversight on technology and cyber risks across the Bank. The role partners with business units and IT to validate controls, conduct risk assessments, and strengthen cyber resilience in line with regulatory guidelines.

The incumbent will lead risk assessments, advise on mitigation strategies, and drive improvements in control maturity while aligning with the Group CISO's strategy and reporting cycles.