Cybersecurity Policy & Awareness Lead

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Randstad Malaysia is seeking a Lead, IT Security Policy & Awareness to drive enterprise information security governance and promote a strong security culture. You will develop security policies, manage governance initiatives and lead awareness programmes to ensure compliance.

Role entails collaborating with technology, risk, audit and business teams to strengthen cybersecurity posture in a highly regulated financial services environment.

Qualifications

• 8+ years of IT security experience in Financial Services or banking environments.
• Knowledge of ISO 27001, PCI-DSS and related regulatory requirements.
• Proven ability to develop security policies and governance documentation.

Responsibilities

• Develop, review and maintain enterprise IT security policies, standards and governance docs.
• Lead organisation-wide security awareness and cybersecurity education initiatives.
• Ensure policies comply with regulatory requirements and industry best practices.
• Collaborate with technology, risk, audit and business teams to improve governance processes.
• Monitor regulatory updates and cybersecurity trends to recommend policy enhancements.
• Conduct policy reviews, governance assessments and compliance monitoring.
• Prepare governance reports and executive updates on policy compliance and awareness effectiveness.
• Support audits by providing governance documentation and policy evidence.
• Drive continuous improvement of enterprise cybersecurity governance.

Skills

IT Security Governance

GRC

ISMS

MAS

BNM

PCI DSS

Education

Bachelor Degree

Job description

Randstad Malaysia is seeking a Lead, IT Security Policy & Awareness to drive enterprise information security governance and promote a strong security culture. You will develop security policies, manage governance initiatives and lead awareness programmes to ensure compliance.

Role entails collaborating with technology, risk, audit and business teams to strengthen cybersecurity posture in a highly regulated financial services environment.