Group Head Information Security, SVP

RHB Banking Group; Kuala Lumpur; On-site; MYR 320,000 - 520,000; Full time

Job summary

RHB Banking Group is seeking an experienced security leader to drive cyber security capabilities across Malaysia and regional operations. You will safeguard critical banking systems, protect customer assets, and oversee risk management in a fast-changing threat landscape.

You will lead SOC/incident response, security architecture, and regulatory compliance, building a high-performing IT security organization and partnering with regulators, auditors, and business teams.

Qualifications

• 10-15+ years of Information Security or Technology Risk experience, preferably in financial services.
• Proven leadership in enterprise-scale security functions and risk programmes.
• Strong expertise in cyber security operations, incident response, security architecture, and regulatory compliance.
• Excellent stakeholder management, leadership and communication skills.
• CISSP, CISM, CISA, or equivalent certifications are highly desirable.

Responsibilities

• Lead Cyber Security Operations & Incident Response across the Group.
• Drive security architecture and technology controls for network, endpoint, and cloud environments.
• Oversee risk identification, assessment, mitigation, and regulatory compliance.
• Define and execute the Group's IT Security strategy, governance, and budget.

Skills

Leadership

Stakeholder management

Communication

Cyber security operations

Incident response

Security architecture

Regulatory compliance

Education

CISSP

CISM

CISA

Tools

IAM

PAM

SIEM

SOAR

EDR/XDR

DLP

Encryption

Vulnerability management

Penetration testing

Job description

RHB Banking Group is seeking an experienced and forward-thinking security leader to drive and strengthen the Group's cyber security capabilities across Malaysia and regional operations.

This role is accountable for safeguarding critical banking systems, protecting customer assets, managing cyber security risks, and ensuring the Group remains resilient against an increasingly complex threat landscape.

Key Responsibilities

Lead Cyber Security Operations & Incident Response

• Provide executive oversight of Security Operations Centre (SOC) capabilities, threat monitoring, threat detection, threat hunting, and cyber incident response.
• Act as the senior escalation point for significant cyber and information security incidents, ensuring effective containment, recovery, and stakeholder communication.
• Drive continuous improvement of cyber resilience, incident readiness, and response capabilities across the Group.

Drive Security Architecture & Technology Controls

• Lead the security strategy and governance of enterprise security controls across network, endpoint, application, identity, cloud, and data environments.
• Ensure security-by-design principles are embedded within technology initiatives, system implementations, and transformation programmes.
• Oversee key security capabilities including Identity & Access Management (IAM), Privileged Access Management (PAM), SIEM, SOAR, EDR/XDR, Data Loss Prevention (DLP), encryption, vulnerability management, and penetration testing.

Strengthen Technology Risk Management & Regulatory Compliance

• Oversee enterprise-wide cyber security risk identification, assessment, mitigation, and reporting.
• Ensure compliance with regulatory, statutory, and industry requirements relating to technology risk and information security.
• Lead engagement with regulators, auditors, and independent assessors while driving timely remediation of audit and regulatory findings.

Provide Strategic Leadership

• Define and execute the Group's IT Security strategy, roadmap, and target operating model.
• Establish and maintain security policies, standards, and governance frameworks across the Group.
• Lead, develop, and build a high-performing IT Security organization while fostering a strong security culture across technology and business teams.
• Manage security budgets, strategic investments, and key vendor partnerships.

What We're Looking For

• 10-15+ years of Information Security, Cyber Security, or Technology Risk experience, preferably within financial services or other highly regulated industries.
• Proven leadership experience managing enterprise-scale security functions, security operations, and technology risk programmes.
• Strong expertise in cyber security operations, incident response, security architecture, and regulatory compliance.
• Excellent stakeholder management, leadership, and communication skills.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are highly desirable.

Why Join Us?

This is an opportunity to lead cyber security for one of Malaysia's leading financial institutions, shaping the future of security, resilience, and technology risk management across a complex and dynamic banking environment.