Cyber Risk & Governance Associate Manager

Permodalan Nasional Berhad; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Permodalan Nasional Berhad is seeking an Associate Manager, Tech & Cyber Risk to strengthen cybersecurity governance and manage technology risks. You will drive risk monitoring, compliance reporting, and maturity initiatives to safeguard the organisation against evolving threats.

In this role, you will coordinate risk assessments, assist audits, and engage with regulators, business leaders, and technology teams to enhance resilience and risk culture across the organisation.

Qualifications

• Bachelor's degree required.
• 3–5 years in cybersecurity, IT governance, risk management, or compliance.
• Knowledge of NIST, ISO 27001, and COBIT.
• Familiarity with SC GTRM and BNM RMiT compliance.
• Certifications such as Security+, ISO 27001, CISM, CRISC, CISSP, or CISA are a plus.

Responsibilities

• Support implementation and enhancement of cyber risk frameworks, policies, and governance practices.
• Monitor regulatory developments and ensure alignment with cybersecurity regulations and internal policies.
• Coordinate and support cyber risk reporting to management, Board committees, and regulators.
• Conduct technology and cybersecurity risk assessments, including BBRA and project risk reviews.
• Facilitate internal and external audits by coordinating evidence gathering and remediation tracking.
• Coordinate cyber simulation exercises and incident response readiness across teams.
• Drive cybersecurity awareness and risk culture initiatives through sessions and workshops.
• Support cyber maturity assessments by coordinating stakeholders and analyzing results.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Education

Bachelor's Degree in Computer Science/Info Security

Job description

Permodalan Nasional Berhad is seeking an Associate Manager, Tech & Cyber Risk to strengthen cybersecurity governance and manage technology risks. You will drive risk monitoring, compliance reporting, and maturity initiatives to safeguard the organisation against evolving threats.

In this role, you will coordinate risk assessments, assist audits, and engage with regulators, business leaders, and technology teams to enhance resilience and risk culture across the organisation.