ISMS Strategy Lead — ISO 27001 & Regulatory Risk

Tranglo; Kampung Malaysia Tambahan; On-site; MYR 320,000 - 520,000; Full time

Job summary

Tranglo seeks a Senior Manager, Information Security to lead enterprise governance, risk management, and regulatory compliance. This executive role reports to the C-suite and Board, shaping the ISMS framework and ensuring ISO 27001:2022 certification readiness, with a strong emphasis on BNM RMiT compliance.

You will mentor the Information Security Manager and coordinate with stakeholders to balance security and business objectives in a fintech environment.

Qualifications

• 8–10+ years in Information Security with 3–5 years in strategic leadership or governance.
• Deep expertise in financial services or fintech regulatory environments.
• Proven track record in ISO 27001:2022 certification or transition programs.
• Active executive certifications such as CISSP, CISM, or CRISC.

Responsibilities

• Lead enterprise ISMS architecture and govern security policy across Tranglo.
• Drive ISO 27001:2022 certification efforts and liaise with external auditors.
• Ensure compliance with BNM RMiT, PDPA, and global financial regulations.
• Oversee third‑party risk, vendor security governance, and risk dashboards.

Skills

Strategic leadership

Governance

Regulatory compliance

ISO 27001

Executive communication

Risk management

Vendor risk management

CISSP/CISM/CRISC

Education

Bachelor's or Master's in Information Security / CS

Job description

Tranglo seeks a Senior Manager, Information Security to lead enterprise governance, risk management, and regulatory compliance. This executive role reports to the C-suite and Board, shaping the ISMS framework and ensuring ISO 27001:2022 certification readiness, with a strong emphasis on BNM RMiT compliance.

You will mentor the Information Security Manager and coordinate with stakeholders to balance security and business objectives in a fintech environment.