Infrastructure Governance & Risk Manager

Two95 International Inc.; Kuala Lumpur; On-site; MYR 120,000 - 190,000; Full time

Job summary

Two95 International Inc. is seeking an Infrastructure Project Manager with 5 years of experience to lead governance, risk and assurance activities across IT infrastructure domains.

You will collaborate with risk management, compliance teams, and service owners to enforce policies, support audits, and deliver clear governance reporting to senior management.

The role emphasizes continual improvement and strong communication to translate technical risk into business impact.

Qualifications

• Degree in IT/CS/Engineering required.
• COBIT, ITIL, ISO 27001 certifications preferred.
• 2–5 years of IT infrastructure governance, risk, audit, or assurance experience.
• Experience supporting IT audits and regulatory reviews.
• Experience in regulated environments is advantageous.
• Strong governance, risk, and compliance knowledge is essential.
• Excellent stakeholder management and reporting skills.

Responsibilities

• Maintain and enforce IT infrastructure governance frameworks, standards, and policies.
• Provide governance oversight for infrastructure initiatives, changes, and operations.
• Identify and assess infrastructure-related risks and design key controls.
• Support audit preparations, evidence collection, and management responses.
• Prepare governance, risk, and assurance reports for senior management.
• Identify improvement opportunities to enhance governance maturity and control effectiveness.

Skills

Governance & risk

Audit & assurance

Stakeholder management

Communication skills

Documentation & reporting

Analytical thinking

Education

Degree in Information Technology/Computer Science/Engineering

Tools

COBIT

ITIL

ISO 27001

Job description

Two95 International Inc. is seeking an Infrastructure Project Manager with 5 years of experience to lead governance, risk and assurance activities across IT infrastructure domains.

You will collaborate with risk management, compliance teams, and service owners to enforce policies, support audits, and deliver clear governance reporting to senior management.

The role emphasizes continual improvement and strong communication to translate technical risk into business impact.