IT Governance Manager

PAYDIBS SDN BHD; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Paydibs Sdn Bhd in Malaysia is seeking an IT Governance & Risk professional to lead governance, risk, and compliance across PCI DSS, regulatory requirements and third‑party risk. You will partner with Engineering, Security, Product and Ops to embed governance in delivery, manage risk registers, audit findings and management reports, and drive continuous improvement through control effectiveness.

The role requires 7–10 years in IT governance or risk, with strong communication and stakeholder

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity or related field.
• 7–10 years of IT governance, technology risk, or compliance experience.
• Strong knowledge of PCI DSS, BNM/PayNet, PDPA and risk frameworks.
• Experience in audit management, risk assessments, and regulatory compliance.
• Understanding of IT controls, secure SDLC, access and incident management.

Responsibilities

• Own and maintain IT governance framework, risk registers, and governance calendar.
• Coordinate technology compliance across PCI DSS, BNM/PayNet and PDPA.
• Lead governance forums, risk dashboards, and management/Board reporting.
• Track remediation from audits and incidents to closure with auditable evidence.
• Embed governance into delivery with secure SDLC, access, logging and BCDR testing.
• Develop governance awareness for technology and business teams.

Skills

Stakeholder management

Analytical thinking

Communication skills

Audit management

Regulatory compliance

IT governance

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Job description

Own and maintain the IT Governance Framework, Technology Risk Management Framework, technology policies, standards, control register and governance calendar.

Coordinate technology compliance across PCI DSS, BNM/PayNet requirements, PDPA, internal audit and customer/partner assurance requests.

Establish and operate technology governance forums, including preparation of risk dashboards, material incident reports, control exceptions, strategic-project updates and management/Board reporting.

Maintain the technology risk register; facilitate risk assessments, treatment plans, risk acceptance and timely escalation of material residual risks.

Lead governance for third-party service providers: due diligence, security assessments, contractual control requirements, concentration risk, subcontractor oversight, annual reviews and exit/contingency planning.

Govern critical technology changes, architecture decisions, production access exceptions and control deviations, ensuring appropriate approvals and auditable evidence.

Partner with Engineering, DevOps, Security, Product and Operations to embed governance into delivery: secure SDLC, vulnerability remediation, access management, logging, monitoring, incident management and BCDR testing.

Track remediation from audits, penetration tests, PCI assessments, incidents and DR exercises through to verified closure.

Maintain an evidence repository that is audit-ready, complete and current.

Support governance of major initiatives.

Develop practical governance awareness for technology and business teams; focused on accountability, not paperwork for its own sake.

Job Requirements

Bachelor's degree in IT, Computer Science, Cybersecurity, or a related field.

7–10 years of experience in IT governance, technology risk, or compliance, preferably in fintech or financial services.

Strong knowledge of PCI DSS, BNM/PayNet requirements, PDPA, and technology risk frameworks.

Experience in audit management, risk assessments, third‑party risk, and regulatory compliance.

Understanding of IT controls, secure SDLC, access management, incident management, and business continuity.

Strong stakeholder management, analytical, and communication skills.

CISA, CRISC, CISM, CISSP, or ISO 27001 certifications are an advantage.

Computer Software & Networking 11-50 employees

Paydibs Sdn Bhd is a Bank Negara–regulated payment service provider under the Financial Services Act 2013. It enables businesses to accept e-payments via its proprietary solutions—Paydibs Pay for in-store QR/e‑wallet payments (Alipay, TNG, Boost, etc.) integrated with POS and mobile devices, and Paydibs Checkout for online payments via Visa, MasterCard, FPX, and e‑wallets. With robust fraud protection, real-time notifications, and easy API integration, Paydibs simplifies payment acceptance.

Paydibs Sdn Bhd is a Bank Negara–regulated payment service provider under the Financial Services Act 2013. It enables businesses to accept e-payments via its proprietary solutions—Paydibs Pay for in-store QR/e‑wallet payments (Alipay, TNG, Boost, etc.) integrated with POS and mobile devices, and Paydibs Checkout for online payments via Visa, MasterCard, FPX, and e‑wallets. With robust fraud protection, real-time notifications, and easy API integration, Paydibs simplifies payment acceptance.