Head of Information Security

Moomoo MY; Kuala Lumpur; On-site; MYR 240,000 - 420,000; Full time

Benefits offered by this job

13 months contractual bonus

Competitive compensation & benefits

Performance bonus

Convenient Access to Public Transport

Exam/Certification Sponsorship

Career Development Opportunities in IT

Team Building & Bonding Activities

Free-Flow Pantry Snacks & Drinks

Dynamic, Multinational Working Envir­•

Job summary

Moomoo Malaysia is seeking an independent and proactive Head of Information Security to lead local governance and regulatory compliance initiatives. This hands-on role requires familiarity with Malaysia's regulatory landscape in capital markets and financial services, and comfort working in a fast-paced startup environment.

The ideal candidate will coordinate with global security teams, oversee local policies, and collaborate with Compliance, Legal, Risk, and Technology to ensure robust security

Qualifications

• Bachelor's Degree in Information Security, Computer Science, IT, Cybersecurity or related field.
• 5-8 years of relevant information security, cybersecurity, IT risk, technology risk, or governance experience.
• Familiar with Malaysian regulatory requirements in cybersecurity and information security (Securities Commission Malaysia or other regulators).
• Experience in brokerage firms, investment banks, capital markets, fintech, or financial services is advantageous.
• Experience supporting regulatory audits and examinations.

Responsibilities

• Act as the primary Information Security representative for Moomoo Malaysia.
• Coordinate with Global Security Center to implement local regulatory requirements.
• Liaise with Malaysian regulators on information security, cybersecurity, and technology risk matters.
• Ensure compliance with local cybersecurity frameworks and internal global policies, including breach notification obligations.
• Support regulatory inspections, audits, and thematic reviews.
• Review and localize information security policies to align with global requirements and Malaysian regs.
• Coordinate with Compliance, Legal, Risk, Technology, and Business teams on security matters.
• Monitor regulatory developments and provide cybersecurity recommendations.
• Support incident response coordination and regulatory reporting within timelines.
• Support local cyber resilience, DR/BCP testing, and security awareness training.

Skills

Communication

Stakeholder management

Independent work

Regulatory compliance

Information security

Regulatory audits

Education

Bachelor's Degree in Information Security/related field

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

Moomoo Malaysia is looking for an independent and proactive Head of Information Security to lead the company's local information security governance and regulatory compliance initiatives.

This is a hands-on individual contributor, the ideal candidate should be familiar with Malaysia's regulatory landscape, particularly within the capital markets and financial services industry, and be comfortable working in a fast-paced startup environment.

About the Role

Moomoo Malaysia is looking for an independent and proactive Head of Information Security to lead the company's local information security governance and regulatory compliance initiatives.

This is a hands-on individual contributor, the ideal candidate should be familiar with Malaysia's regulatory landscape, particularly within the capital markets and financial services industry, and be comfortable working in a fast-paced startup environment.

Responsibilites

• Act as the primary Information Security representative for Moomoo Malaysia
• Coordinate and collaborate closely with the Global Security Center to ensure local regulatory requirements are implemented effectively
• Serve as the main liaison with Malaysian regulators (e.g. Securities Commission Malaysia, Bursa Malaysia and other relevant authorities) on information security, cybersecurity, technology risk and other related matters
• Ensure compliance with local regulatory requirements on Cybersecurity Frameworks, IT Security Standards, Regulatory Outsourcing Guidelines etc and internal global security policies and etc, including mandatory breach notification obligations
• Support regulatory inspections, audits, thematic reviews, information security assessments and etc
• Review, localize and implement information security policies, standards, and procedures in alignment with both global security requirements and Malaysian regulations
• Coordinate internal stakeholders across Compliance, Legal, Risk, Technology, and Business teams on security-related matters
• Monitor regulatory developments and provide recommendations on cybersecurity and information security best practices
• Support incident response coordination and regulatory reporting for security incidents within prescribed timelines.
• Support local cyber resilience, DR/BCP testing activities
• Deliver local security awareness training and programs required adapted from global materials etc

Requirements

• Bachelor's Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field
• 5-8 years of relevant experience in Information Security, Cybersecurity, IT Risk, Technology Risk, or Information Security Governance
• Familiar with Malaysian regulatory requirements relating to cybersecurity and information security, particularly from the Securities Commission Malaysia (SC) or other financial regulators
• Experience within a brokerage firm, investment bank, capital markets, fintech, or financial services environment will be a strong advantage
• Able to work independently with minimal supervision and manage multiple stakeholders across regional and global teams
• Understanding of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, or equivalent
• Experience supporting regulatory audits and examinations
• Comfortable working in a dynamic, fast-paced startup environment
• Strong communication and stakeholder management skills, with the ability to engage regulators, senior management, and regional teams effectively
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent will be an added advantage
• Language proficiency in English, Malay is a must; Chinese/Mandarin is highly advantageous given global team collaboration
• Bumiputera candidates are encouraged to apply.

Benefits

We offer a comprehensive and holistic work experience and package as follows:

• 13 months contractual bonus
• Competitive compensation & benefits.
• Performance bonus
• Convenient Access to Public Transport
• Exam/Certification Sponsorship
• Career Development Opportunities in the Financial Services Industry
• Company Team Building & Bonding Activities
• Free-Flow Pantry Snacks & Drinks
• Dynamic, Multinational Working Environment

Please note that only short-listed candidates will be contacted. Thank you.