Head of Information Security & Risk

ExecThread; Kuala Lumpur; On-site; MYR 300,000 - 600,000; Full time

Job summary

ExecThread in Kuala Lumpur seeks a Head of Information Security and Risk to define and execute enterprise-wide cybersecurity strategies for a transformative global payments platform. You will embed security into technology delivery, build governance models, and lead security readiness for go-live phases while collaborating with CTOs and engineering teams.

With 15+ years in cybersecurity and at least 10 in senior leadership within regulated environments across SEA/APAC, you will guide regulatory

Qualifications

• Minimum of 15 years' experience in cybersecurity.
• At least 10 years in senior leadership roles in highly regulated environments such as payments, banking, or fintech.
• Proven track record in managing cyber risk and regulatory compliance, especially in SEA and APAC.
• Experience partnering with CTOs and engineering teams to integrate security into product development lifecycles.
• Exceptional stakeholder coordination and calm leadership under pressure.

Responsibilities

• Define and execute enterprise-wide cybersecurity strategies.
• Embed security into technology delivery and governance models.
• Lead the build-up of internal security capabilities and readiness for go-live phases.
• Collaborate with executive leadership and external partners to ensure regulatory readiness.

Skills

Cybersecurity leadership

Regulatory compliance

Governance

Security architecture

Stakeholder management

Job description

The Company is seeking a Head of Information Security and Risk to play a pivotal role in the development and security of a transformative global payments platform. The successful candidate will be responsible for defining and executing enterprise-wide cybersecurity strategies, with a focus on embedding security into all aspects of technology delivery. This includes working closely with executive leadership to influence security practices, leading the creation of governance models, and overseeing the build-up of internal security capabilities. The role demands a leader with a calm and structured approach, capable of driving security readiness for operational go-live phases and continuously improving control maturity. Collaboration is key, both with internal teams and external partners, to ensure the organization is prepared for operational launches and regulatory scrutiny.

Applicants for the Head of Information Security and Risk position at the company should have a minimum of 15 years' experience in cybersecurity, with at least 10 years in senior leadership roles within highly regulated environments such as payments, banking, or fintech. The role requires a candidate with a proven track record in managing cyber risk, deep technical expertise in digital infrastructure protection, and a strong understanding of regulatory compliance, particularly in the SEA and APAC regions. The ideal candidate will have a background in partnering with CTOs and engineering teams to integrate security into platform development lifecycles, as well as experience in building and maturing security capabilities in evolving or regulated environments. Exceptional stakeholder coordination skills and a calm leadership style under pressure are essential for this position.

Functions:

• Information Technology

A collaborative global payments platform building instant cross-border payment infrastructure.