Cyber Risk Governance Lead (2LoD) - Tech & Compliance

Confidential; Petaling Jaya; Vor Ort; MYR 180.000 - 300.000; Vollzeit

Zusammenfassung

Confidential is seeking an experienced Cyber Risk governance professional to own the second line function (2LoD) in technology and cyber risk. The role will develop and maintain risk frameworks, policies, and standards, and drive adherence across the organisation.

You will engage with regulators, coordinate audits, and lead technology risk reporting while collaborating with technology, data and product teams to manage key risks for management committees.

Qualifikationen

• Degree in Computer Science or technology-related field.
• 8–10 years in a second or third line role at a regulated financial institution or TechFin/Fintech.
• Direct exposure to or interaction with financial regulators is preferred.
• Strong English communication and stakeholder management skills.

Aufgaben

• Oversee second line technology and cyber risk governance in line with regulatory requirements.
• Develop and maintain cyber risk frameworks, policies and standards.
• Promote adherence to security policies and standards across the organisation.
• Manage technology and cyber regulatory obligations and report material non-conformities.
• Lead risk reporting (KRI) and ensure alignment with risk appetite.
• Collaborate with business and technology teams to track key risks and provide updates to risk committees.
• Engage in audits and regulatory examinations focusing on technology and cyber risks.
• Coordinate with Procurement, Legal, Data Governance, Compliance and Data Protection Officers to embed cyber security in contracts.

Ausbildung

Degree in Computer Science or technology-related field

Jobbeschreibung

Confidential is seeking an experienced Cyber Risk governance professional to own the second line function (2LoD) in technology and cyber risk. The role will develop and maintain risk frameworks, policies, and standards, and drive adherence across the organisation.

You will engage with regulators, coordinate audits, and lead technology risk reporting while collaborating with technology, data and product teams to manage key risks for management committees.