Data & Privacy Governance Lead

Gamuda Group; Kuala Lumpur; On-site; MYR 120,000 - 170,000; Full time

Job summary

Gamuda Berhad in Malaysia seeks a Senior Executive - Data & Digital Governance with expertise in ISO 27001, ISO 27701, and IT governance to drive enterprise data protection strategies and ensure compliance with GDPR, PDPA and regional laws.

You will align information governance with business objectives, lead cross-functional teams, and promote digital trust through privacy by design, risk-based controls, and ongoing improvement of data management practices.

Qualifications

• CISA, CGEIT, ISO 27001 & ISO 27701 Lead Auditor certifications preferred.
• Experience with GDPR, PDPA and related privacy regulations.
• Knowledge of IT security, incident management and data protection tools.

Responsibilities

• Define and oversee Information Security policies and ISMS per ISO 27001.
• Define and oversee Data Management policies and PIMS per ISO 27701.
• Manage data inventory, data flow mapping, and PIAs/DPIAs.
• Liaise with regulators, auditors and external stakeholders on data and cybersecurity matters.

Skills

CISA

CGEIT

ISO 27001 Lead Auditor

ISO 27701 Lead Auditor

CRISC

CISSP

PDPA knowledge

Education

Bachelor degree in IT related field

Job description

Gamuda Berhad in Malaysia seeks a Senior Executive - Data & Digital Governance with expertise in ISO 27001, ISO 27701, and IT governance to drive enterprise data protection strategies and ensure compliance with GDPR, PDPA and regional laws.

You will align information governance with business objectives, lead cross-functional teams, and promote digital trust through privacy by design, risk-based controls, and ongoing improvement of data management practices.