Executive InfoSec Strategist: ISO 27001 & RMiT Lead

Tranglo; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

Tranglo is seeking a Senior Manager, Information Security to lead enterprise security governance, risk management, and regulatory alignment at the executive level. This role advises the C-suite and Board on cyber risk and compliance matters.

You will own the ISMS framework, oversee ISO 27001:2022 certification efforts, and drive regulatory alignment, while guiding the Information Security Manager in day-to-day operations.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 8–10+ years of progressive experience in Information Security, with at least 3–5 years in a strategic leadership or governance role.
• Mandatory background in the Financial Services, Fintech, or Banking sector, with deep, practical knowledge of managing security in highly regulated environments.
• Proven, demonstrable experience leading an organization through an ISO 27001:2022 certification or transition audit.
• Must hold at least one active, globally recognized executive security certification: CISSP, CISM, or CRISC.

Responsibilities

• Lead, architect, and manage Tranglo’s enterprise-wide Information Security Management System (ISMS).
• Drive the implementation and continuous certification of the ISO/IEC 27001:2022 standard, serving as the primary point of contact for external auditors and certification bodies.
• Define and publish enterprise security policies, standards, and strategic objectives that align with Tranglo’s fintech business goals and risk appetite.
• Ensure absolute alignment and compliance with Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT) requirements, the Personal Data Protection Act (PDPA), and other relevant global financial regulations.
• Own and maintain the enterprise Information Security Risk Register, ensuring risks are identified, assessed, and treated.
• Present periodic cyber risk postures, threat landscapes, and compliance dashboards to ISMS Committee, C-suite, and Board.
• Design and oversee the enterprise Third-Party Vendor Security Management framework.
• Serve as the final escalation point for critical vendor risk assessments, working with Procurement, HR-Admin, and DICs to governance Gate 0 workflows.
• Advise the ISMS Committee on supply chain vulnerabilities and cloud service risks.
• Provide strategic direction, mentorship, and high-level oversight to the Information Security Manager and operational security team.
• Delineate clear boundaries between strategic governance and tactical/technical security operations.
• Foster a culture of security awareness across all business units, championing security as a business enabler.

Skills

Strategic leadership

Stakeholder management

Executive communication

Risk assessment

Regulatory compliance

Education

Bachelor’s or Master’s degree in Information Security or related field

Active executive security certification: CISSP/CISM/CRISC

Tools

AWS security

Azure security

GCP security

ISMS frameworks

Job description

Tranglo is seeking a Senior Manager, Information Security to lead enterprise security governance, risk management, and regulatory alignment at the executive level. This role advises the C-suite and Board on cyber risk and compliance matters.

You will own the ISMS framework, oversee ISO 27001:2022 certification efforts, and drive regulatory alignment, while guiding the Information Security Manager in day-to-day operations.