IT Security & Risk Governance Leader

Prudential; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Eastspring is seeking a seasoned IT Security leader to shape and drive the local IT security programme in Kuala Lumpur. You will align with Group requirements and regulatory expectations while coordinating governance forums, risk assessments and vulnerability management.

The role focuses on building resilient controls, overseeing third‑party security, and leading incident governance with a strong emphasis on risk reduction and regulatory compliance.

Qualifications

• Bachelor's degree or equivalent in IT/InfoSec or related field.
• 8–12 years of relevant experience across information security, risk, audit or governance.
• Financial services or regulated industry experience preferred.

Responsibilities

• Lead IT security governance and multi-year security roadmap.
• Oversee technology risk assessments for apps, infra and third parties.
• Govern vulnerability, patch management and security remediation.
• Manage IAM governance including access reviews and certifications.
• Coordinate third-party security oversight and vendor risk assessments.
• Lead incident governance, cyber resilience planning and crisis support.
• Prepare security, risk and compliance reporting for leadership forums.
• Mentor GSRC team and drive governance improvements.

Skills

IT governance

Risk assessment

Security operations

Vendor risk

Education

Bachelor’s degree in Information Security, Computer Science, IT, Information Systems, Risk Management, Business Administration

CISM, CISSP, CRISC or CISA certifications preferred

Job description

Eastspring is seeking a seasoned IT Security leader to shape and drive the local IT security programme in Kuala Lumpur. You will align with Group requirements and regulatory expectations while coordinating governance forums, risk assessments and vulnerability management.

The role focuses on building resilient controls, overseeing third‑party security, and leading incident governance with a strong emphasis on risk reduction and regulatory compliance.