IT Security & Risk Governance Manager

Eastspring Investments Berhad; Kuala Lumpur; On-site; MYR 240,000 - 520,000; Full time

Job summary

Eastspring Investments Berhad is seeking a senior IT Security professional to lead the local IT Security Programme and oversee technology risk, governance and cyber resilience across the organisation. The role coordinates security policies, controls and audits, and drives risk remediation with cross‑functional teams.

The candidate will manage vulnerability and patch governance, IAM oversight, and third-party security assessments while working closely with stakeholders to ensure regulatory

Qualifications

• Bachelor’s degree in Information Security, CS, IT, IS, Risk Management, Business Administration or a related discipline.
• Typically 8 to 12 years of relevant experience in information security, technology risk, IT governance or regulatory compliance.
• Experience in financial services/asset management is strongly preferred.
• One or more relevant certifications such as CISM, CISSP, CRISC or CISA are preferred.

Responsibilities

• Develop, maintain and execute the local IT Security Programme and multi-year security roadmap.
• Coordinate implementation of Group information security policies, standards and controls.
• Lead requirements definition, solution design reviews and security governance forums.
• Oversee technology risk assessments for applications, projects and third-party services.
• Govern vulnerability management, patch management and security remediation.
• Oversee IAM governance, including periodic user-access reviews and privileged identities.
• Lead third-party security oversight and vendor risk assessments.
• Coordinate cyber resilience activities, incident classification and reporting.
• Lead audit planning, evidence collection and management responses.
• Lead drafting and maintenance of governance documentation.

Skills

Cybersecurity governance

Technology risk management

IT audit coordination

Vulnerability and patch governance

Third-party security

Incident governance

Stakeholder management

Education

Bachelor's degree in Information Security

Job description

Eastspring Investments Berhad is seeking a senior IT Security professional to lead the local IT Security Programme and oversee technology risk, governance and cyber resilience across the organisation. The role coordinates security policies, controls and audits, and drives risk remediation with cross‑functional teams.

The candidate will manage vulnerability and patch governance, IAM oversight, and third-party security assessments while working closely with stakeholders to ensure regulatory