Cyber Risk Strategist: Governance, Maturity & Insight

CelcomDigi Bhd; Subang Jaya; In loco; MYR 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

CelcomDigi Bhd in Malaysia is seeking a Cybersecurity Risk Specialist to drive the organization\'s risk-based security program. You will execute risk management strategy, oversee risk acceptance, and support GRC tools and data-driven governance.

You will perform maturity assessments, monitor risk registers, report to senior management and Board committees, and help advance risk practices across the enterprise with stakeholders.

Competenze

• Bachelor's degree in Cybersecurity, Risk Management, IT, or related field.
• 3–5 years of cybersecurity risk management experience.
• Understanding of ISO 27001, NIST CSF, and related standards.
• Experience with GRC tools and workflow platforms.
• Ability to communicate risk to technical and non-technical stakeholders.

Mansioni

• Perform in-depth assessments of cybersecurity risks affecting internal systems and infrastructure.
• Monitor and maintain the Cybersecurity Risk Register and track remediation plans.
• Produce periodic risk reports for senior management and Board committees.
• Manage Cybersecurity Risk Acceptance processes and document residual risks.
• Drive awareness initiatives to strengthen risk acceptance understanding across stakeholders.
• Champion automation of risk management workflows using GRC platforms and tools.
• Conduct enterprise-wide Cybersecurity Maturity Assessments to support roadmaps.

Conoscenze

Cybersecurity risk management

GRC workflow

Stakeholder communication

Analytical skills

Formazione

Bachelor's degree in Cybersecurity, Risk Management, IT, or related field

Strumenti

ServiceNow

Microsoft Power Apps

GRC tools

Descrizione del lavoro

CelcomDigi Bhd in Malaysia is seeking a Cybersecurity Risk Specialist to drive the organization\'s risk-based security program. You will execute risk management strategy, oversee risk acceptance, and support GRC tools and data-driven governance.

You will perform maturity assessments, monitor risk registers, report to senior management and Board committees, and help advance risk practices across the enterprise with stakeholders.