Director, IT GRC & Security Governance

DKSH; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

DKSH seeks an Associate Director, IT Governance, Risk and Compliance (GRC) to lead the enterprise cybersecurity posture and governance maturity. You will drive IT GRC practices, align with global standards, and manage technology risk with precision.

You will build and lead a team of cybersecurity professionals, develop policies and procedures, and ensure audit-ready ISO 27001 compliance across the organization.

Qualifications

• Bachelor's degree in Computing, Information Technology, or equivalent.
• 10+ years of experience in IT governance, risk, and compliance with 5+ years in a leadership role.
• Deep expertise in IT GRC frameworks, policy management, risk practices, and IT GRC tools.

Responsibilities

• Define and drive strategic direction for DKSH IT GRC, improving governance maturity.
• Lead and develop a cybersecurity team and embed IT GRC across the enterprise.
• Own development, implementation, and validation of cybersecurity policies and standards.
• Lead ISO 27001 compliance program and maintain audit readiness.
• Define IT Risk and Internal Controls Frameworks and drive risk mitigation.
• Champion a center of excellence for cybersecurity management and continuous improvement.
• Provide clear reporting to senior leadership on controls and risk exposure.
• Oversee information security risk assessments and controls selection.

Skills

IT governance

Policy management

Risk management

Team leadership

Communication

Independent work

Education

Bachelor's degree in Computing or IT

Tools

IT GRC tools

Active Directory

Windows

Linux

DNS/DHCP

IPS

EDR

Virtualization

Job description

DKSH seeks an Associate Director, IT Governance, Risk and Compliance (GRC) to lead the enterprise cybersecurity posture and governance maturity. You will drive IT GRC practices, align with global standards, and manage technology risk with precision.

You will build and lead a team of cybersecurity professionals, develop policies and procedures, and ensure audit-ready ISO 27001 compliance across the organization.