IT Security Governance Officer

Kenanga Group; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Kenanga Group seeks an experienced IT Audit & Compliance Lead to act as the primary liaison between Technology and auditors, regulators, risk, and compliance stakeholders. You will coordinate information requests, ensure timely delivery of audit submissions, maintain documentation, and drive remediation to close gaps in IT controls.

The role requires strong English communication, 5+ years in IT governance/cybersecurity/risk/compliance, and relevant certifications (CISM/CISA/CISSP/CRISC).

Qualifications

• Bachelor’s degree in a related field.
• Certifications such as CISM, CISA, CISSP or CRISC.
• Proven experience in managing audit and compliance processes.
• Minimum 5 years’ experience in IT Governance, Cybersecurity, Risk, Compliance or Audit-related domain.
• Expertise in risk assessment methodologies, cybersecurity frameworks (NIST CSF), and regulatory environments (RMIT, GTRM, ITSS).
• Technical knowledge of IT infrastructure, cybersecurity, and data management domains.
• Excellent verbal and written communication skills in English with good negotiation skills.
• Ability to own matters through to a logical conclusion.
• Meticulous in record keeping and documentation.

Responsibilities

• Audit & compliance coordination with internal and external auditors, regulators, risk and compliance stakeholders.
• Attend to all matters related to auditors and regulators and negotiate scope, timeline, findings, and remediation.
• Work with technical and business teams to collect, compile, evaluate, and assess information for audit submissions.
• Perform quality control on audit and compliance matters and document evidence.
• Cascade audit requests to auditees and manage discussions and clarify sessions.
• Collaborate with business units and auditors to close audit issues promptly.
• Conduct periodic reviews of activities against company policies and procedures.
• Report non-compliance findings to superiors and escalate as needed.
• Policy management: create, maintain, and enforce IT policies to ensure regulatory compliance.
• Identify gaps in IT processes and lead improvement initiatives.
• Perform gap analyses against industry or regulatory standards.

Skills

Audit & Compliance

English communication

Negotiation skills

Ownership

Record keeping

Education

Bachelor’s degree in related field

Job description

Serve as the primary liaison between Technology and internal/external auditors, regulators, risk, and compliance stakeholders. Coordinate and manage information requests, facilitate discussions with relevant technology teams, and ensure the timely delivery of accurate, complete, and high-quality audit and compliance submissions. Maintain proper documentation of audit evidence, perform quality assurance reviews on audit-related matters, and escape non-compliance findings to Technology leadership.

JOB RESPONSIBILITIES

• Audit & Compliance
• Attend to all matters related to internal/external auditors, regulators, risk and compliance.
• Negotiate with auditors and internal stakeholders as to audit scope, delivery timeline, audit findings and remediation.
• Work closely with various technical and business teams to collect, compile, evaluate and assess information for audit submission.
• Perform quality control on all audit and compliance matters.
• Systematically record all evidences/supporting documents submitted to audits.
• Cascade audit requests to auditees and manages discussion and clarification session.
• Work closely with business units and auditors to close audit issues in a timely manner.
• Conduct periodic review on activities performed by various teams against the company policies and procedures.
• Report any non-compliance findings to superiors
• Policy Management
• Creating, maintaining, and enforcing IT policies, procedures, and standards to ensure compliance with laws, regulations (BNM RMIT, SC GTRM, Bursa ITSS) and industry standards.
• Process Improvement
• Identify gaps in IT processes and lead improvement initiatives
• Performing gap analysis against industry or regulatory standards

JOB REQUIREMENT

• Bachelor’s degree with related field
• Certifications such as CISM, CISA, CISSP or CRISC
• Proven experience in managing audit and compliance processes
• At least 5 years’ experience in IT Governance, Cybersecurity, Risk, Compliance or Audit related domain
• Expertise in risk assessment methodologies, cybersecurity frameworks (NIST CSF), and regulatory environments (RMIT, GTRM, ITSS).
• Technical knowledge of IT infrastructure, cybersecurity, and data management domains.
• Excellent verbal and written communication skills in English with good negotiation skills
• Ability to take ownership of matters through to a logical conclusion
• Meticulous in record keeping and documentation