GRC & BCM Leader - Data Center Ops

DayOne Data Centers Malaysia I Sdn. Bhd.; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Equal opportunity employer

Global exposure

Job summary

DayOne Data Centers Malaysia I Sdn. Bhd. is seeking a senior GRC/BCM lead in Kuala Lumpur to strengthen governance, risk management, and regulatory compliance across our data center operations.

You will design and maintain governance frameworks, oversee risk assessments, and promote policy adherence. You will coordinate internal and external audits, drive business continuity planning, and partner with engineering, IT, and operations to embed controls.

Qualifications

• Bachelor’s degree required with 8–12 years in governance, risk, compliance, audit or related functions.
• Experience in data centers, critical infrastructure or industrial operations preferred.
• ISO/SOC/regulatory standards knowledge is advantageous.

Responsibilities

• Lead GRC programs and maintain governance frameworks across sites.
• Coordinate enterprise risk management, KRIs and risk registers.
• Oversee compliance programs, regulatory obligations, and incident remediation.
• Design and maintain BCMS, conduct BIAs, DR planning, and exercises.
• Coordinate internal and external audits and track corrective actions.
• Engage stakeholders across operations, IT, EHS, and engineering.

Skills

GRC knowledge

Risk management

Audits & controls

Policy deployment

Stakeholder management

Education

Bachelor's degree in risk management, Business, Law, Accounting, Engineering, or related discipline

Job description

DayOne Data Centers Malaysia I Sdn. Bhd. is seeking a senior GRC/BCM lead in Kuala Lumpur to strengthen governance, risk management, and regulatory compliance across our data center operations.

You will design and maintain governance frameworks, oversee risk assessments, and promote policy adherence. You will coordinate internal and external audits, drive business continuity planning, and partner with engineering, IT, and operations to embed controls.