Head of Information Security

Moomoo Inc.; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Benefits offered by this job

13 months bonus

Competitive compensation

Performance bonus

Public transport access

Certification sponsorship

Career development opportunities

Team building activities

Snacks & drinks

Multinational working environment

Job summary

Moomoo Malaysia is seeking an independent and proactive Head of Information Security to lead local information security governance and regulatory compliance initiatives.

This hands-on role requires familiarity with Malaysia's regulatory landscape, particularly in capital markets and financial services, within a fast-paced startup environment.

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT, Cybersecurity, or related field.
• 5-8 years of experience in Information Security, Cybersecurity, IT Risk, Technology Risk or Information Security Governance.
• Familiar with Malaysian regulatory requirements relating to cybersecurity and information security.
• Experience in brokerage/financial services environment is advantageous.
• Understanding of ISO 27001, NIST CSF or equivalent.
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor preferred.
• English and Malay required; Chinese/Mandarin advantageous.

Responsibilities

• Act as the primary Information Security representative for Moomoo Malaysia.
• Coordinate with Global Security Center to meet local regulatory requirements.
• Liaise with regulators on information security, cybersecurity and risk matters.
• Ensure compliance with Cybersecurity Frameworks, IT Security Standards and guidelines.
• Support regulatory inspections, audits, and reviews.
• Localize and implement information security policies aligned with global and Malaysian regulations.
• Coordinate with Compliance, Legal, Risk, Technology, and Business teams.
• Monitor regulatory developments and advise on best practices.
• Support incident response coordination and regulatory reporting.

Skills

Information security

Regulatory compliance

ISO 27001

NIST CSF

CISSP

CISM

CRISC

Stakeholder management

English

Malay

Chinese/Mandarin

Education

Bachelor's degree in Information Security/related field

Job description

About the Role

Moomoo Malaysia is looking for an independent and proactive Head of Information Security to lead the company's local information security governance and regulatory compliance initiatives.

This is a hands-on individual contributor, the ideal candidate should be familiar with Malaysia's regulatory landscape, particularly within the capital markets and financial services industry, and be comfortable working in a fast-paced startup environment.

Responsibilites

• Act as the primary Information Security representative for Moomoo Malaysia.
• Coordinate and collaborate closely with the Global Security Center to ensure local regulatory requirements are implemented effectively.
• Serve as the main liaison with Malaysian regulators (e.g. Securities Commission Malaysia, Bursa Malaysia and other relevant authorities) on information security, cybersecurity, technology risk and other related matters.
• Ensure compliance with local regulatory requirements on Cybersecurity Frameworks, IT Security Standards, Regulatory Outsourcing Guidelines etc and internal global security policies and etc, including mandatory breach notification obligations.
• Support regulatory inspections, audits, thematic reviews, information security assessments and etc.
• Review, localize and implement information security policies, standards, and procedures in alignment with both global security requirements and Malaysian regulations.
• Coordinate internal stakeholders across Compliance, Legal, Risk, Technology, and Business teams on security-related matters.
• Monitor regulatory developments and provide recommendations on cybersecurity and information security best practices.
• Support incident response coordination and regulatory reporting for security incidents within prescribed timelines.
• Support local cyber resilience, DR/BCP testing activities.
• Deliver local security awareness training and programs required adapted from global materials etc

• Bachelor's Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field.
• 5-8 years of relevant experience in Information Security, Cybersecurity, IT Risk, Technology Risk, or Information Security Governance.
• Familiar with Malaysian regulatory requirements relating to cybersecurity and information security, particularly from the Securities Commission Malaysia (SC) or other financial regulators.
• Experience within a brokerage firm, investment bank, capital markets, fintech, or financial services environment will be a strong advantage.
• Able to work independently with minimal supervision and manage multiple stakeholders across regional and global teams.
• Understanding of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, or equivalent.
• Experience supporting regulatory audits and examinations.
• Comfortable working in a dynamic, fast-paced startup environment.
• Strong communication and stakeholder management skills, with the ability to engage regulators, senior management, and regional teams effectively.
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent will be an added advantage.
• Language proficiency in English, Malay is a must; Chinese/Mandarin is highly advantageous given global team collaboration.
• Bumiputera candidates are encouraged to apply.

We offer a comprehensive and holistic work experience and package as follows:

• 13 months contractual bonus
• Competitive compensation & benefits.
• Performance bonus
• Convenient Access to Public Transport
• Exam/Certification Sponsorship
• Career Development Opportunities in the Financial Services Industry
• Company Team Building & Bonding Activities
• Free-Flow Pantry Snacks & Drinks
• Dynamic, Multinational Working Environment

Please note that only short-listed candidates will be contacted. Thank you.