Governance Manager

DayOne; Kuala Lumpur; On-site; MYR 180,000 - 360,000; Full time

Job summary

DayOne, a global leader in data infrastructure, seeks a seasoned GRC/BCM professional to govern risk, compliance, and business continuity across its data centre operations in Malaysia and beyond.

You will lead enterprise risk management, audits, and regulatory compliance, collaborating with IT, operations, and engineering to embed robust controls and reporting. A strong candidate brings 8–12 years of relevant experience and professional certifications.

Qualifications

• Bachelor’s degree in risk management, business, law, accounting, engineering, or related discipline.
• Professional certifications such as ISO22301, ISO27001, ISO31000, CISA, CRISC, CIA, or equivalent are an advantage.

Responsibilities

• Govern governance, risk, and compliance across data centre operations.
• Coordinate and monitor risk registers, KRIs, audits, and control activities.
• Develop and maintain BCM plans, BCP/DR exercises, and incident response procedures.
• Prepare governance materials, reports, and dashboards for senior management and committees.
• Collaborate with operations, IT, engineering, and corporate teams to embed controls.

Skills

GRC frameworks

BCM frameworks

Operational controls

Documentation & reporting

Stakeholder management

Attention to detail

Education

Bachelor’s degree in risk management / related field

Job description

Join DayOne – Shaping the Future of Data Infrastructure

DayOne is a global leader in the development and operation of high-performance data centers. As one of the fastest-growing companies in the industry, we’ve built a robust presence across Asia and Europe — and we’re just getting started.

As we expand into new international markets, we’re looking for talented, driven individuals to join us on this exciting journey. This is more than a job — it’s an opportunity to be a key contributor to our dynamic team and help shape the future of global data infrastructure.

If you’re passionate about innovation, technology, and growth, we invite you to be part of DayOne’s next chapter.

Job Description

Key Responsibilities

Governance

• Implement and maintain governance frameworks, policies, and procedures in linewith regulatory requirements and industry best practices.

• Ensure consistent application of governance standards across all data centresites and business functions.

• Coordinate governance reporting, documentation, and managementdashboards.

• Prepare governance materials and reports for senior management and internalcommittees.

• Promote ethical conduct, accountability, and transparency through governanceawareness and training initiatives.

Risk Management

• Support the implementation of the enterprise risk management (ERM) frameworkacross data centre operations.

• Coordinate and conduct periodic risk assessments, including operational,regulatory, and strategic risks.

• Maintain and update risk registers, risk treatment plans, and key risk indicators(KRIs).

• Work closely with operations and functional teams to embed risk managementpractices into day-to-day activities.

• Monitor risk mitigation actions and elevate material risks to the Compliance,Risk & Governance Director.

Compliance

• Support the implementation and monitoring of compliance programmes relevantto data centre operations, including security, environmental, and operationalcompliance.

• Track regulatory and contractual compliance obligations and monitor adherenceto applicable local and international standards (e.g. ISO, SOC, data protection, regulatory requirements).

• Assist in monitoring compliance incidents, breaches, and remediation activities,ensuring timely closure and reporting.

• Stay informed of regulatory and industry developments affecting data centreoperations and communicate relevant updates internally.

Business Continuity & Crisis Management

• Support the design, implementation, and maintenance of the Business ContinuityManagement System (BCMS) across data centre operations.

• Coordinate Business Impact Assessments (BIA), risk scenarios, and continuitystrategies with operations and critical function owners.

• Maintain and review Business Continuity Plans (BCP), Disaster Recovery (DR)coordination (in collaboration with IT), and crisis management procedures.

• Organise and facilitate BCP/DR exercises, simulations, and crisis response drills;track lessons learned and improvement actions.

• Support incident response governance, post-incident reviews, and resilienceimprovement initiatives

Audit & Assurance

• Coordinate internal and external audits related to governance, risk, andcompliance (e.g. ISO, SOC, regulatory audits).

• Track audit findings, corrective action plans, and remediation progress.

• Ensure audit documentation, evidence, and records are maintained in an audit ready manner.

Stakeholder Engagement & Collaboration

• Act as a key liaison between the GRC & BCM function and operations, engineering,EHS, IT, and corporate teams.

• Provide guidance and hands-on support to site teams on governance, risk, andcompliance requirements.

• Support training and awareness programmes related to GRC and BCMframeworks and controls.

Continuous Improvement

• Prepare periodic GRC metrics, reports, and dashboards for management review.

• Identify opportunities to improve governance, risk, and compliance processesand controls.

• Support the Director in scaling GRC frameworks and practices as the organisationexpands regionally and globally.

Key Requirements

Qualifications

• Bachelor’s degree in risk management, Business, Law, Accounting, Engineering,or a related discipline.

• Professional certifications such as ISO22301, ISO 27001, ISO 31000, CISA,CRISC, CIA, or equivalent are an advantage.

Experience

• Minimum 8–12 years’ experience in governance, risk management, compliance,business continuity, audit, or related functions.

• Experience in data centres, critical infrastructure, technology, utilities, orindustrial operations is strongly preferred.

• Proven experience leading or coordinating BCP, DR exercises, audits, and riskassessments.

Skills & Competencies

• Strong understanding of GRC and Business Continuity frameworks.

• Ability to translate policies and frameworks into practical operational controls.

• Strong documentation, reporting, and analytical skills.

• Effective stakeholder management and communication skills.

• Detail-oriented, organised, and able to manage multiple priorities.

DayOne is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.