Lead, Cybersecurity Risk management & Security Standard

Averis Sdn Bhd; Kuala Lumpur; Sur place; MYR 150 000 - 230 000; Plein temps

Avantages offerts par ce poste

Medical, dental, and optical benefits

Cross-functional training

Overseas postings and short-term (ex‑)

Learning and development programmes

Reward and recognition awards

Résumé du poste

Averis Sdn Bhd in Kuala Lumpur seeks a senior leader to manage enterprise Cybersecurity Risk governance and Security Standards across IT, OT, AI, cloud, and on‑premise infrastructure. You will establish and maintain the Enterprise Technology Risk Management Framework, define risk policies, and ensure alignment with ERM and group risk requirements.

You will act as a strategic advisor to executive management and risk committees, oversee risk treatment plans, and drive regulatory compliance.

Qualifications

• 8-10+ years of experience in Technology Risk, Cybersecurity, Information Security, IT Governance, IT Audit, or Enterprise Risk Management.
• Minimum 5 years in a leadership or management role.
• Experience in shared services, manufacturing, industrial, or highly regulated environments is preferred.

Responsabilités

• Lead and continuously enhance the enterprise-wide Technology Risk Management function, providing independent oversight and governance over all technology-related risks.
• Act as a strategic advisor to executive management, technology leadership, risk committees, and board-level governance forums on technology risk matters.
• Develop, maintain cybersecurity standards and security baselines for applications and IT infrastructure, aligned with industry best practices and organizational risk requirements.

Connaissances

Technology risk

Cybersecurity

Information security

IT governance

IT audit

Enterprise risk management

Formation

Bachelor's Degree in IT / Cyber Security

Master's Degree is an advantage

Outils

NIST Cybersecurity Framework

Cloud Security

Third-Party Risk Management

Business Continuity & Operational Resilience

OT knowledge

Description du poste

Lead, Cybersecurity Risk management & Security Standard

Here at Averis, our common purpose is to improve lives by developing resources sustainably. Our people are crucial in helping us to realise our vision to be one of the best Global Business Solution (GBS) organization to support our customers in creating value for the Community, Country, Climate, Customer and Company.

Responsibilities:

Lead and continuously enhance the enterprise-wide Technology Risk Management function, providing independent oversight and governance over all technology-related risks including Cybersecurity, Information Security, Artificial Intelligence (AI), Cloud, On-Premise Infrastructure, Operational Technology (OT), Data Protection, Third-Party/Vendor, Digital Transformation, and Emerging Technology risks.

The role ensures technology risks are identified, assessed, prioritized, reported, and managed within the organization's risk appetite while supporting business growth, innovation, operational resilience, regulatory compliance, and digital transformation initiatives.

Act as a strategic advisor to executive management, technology leadership, risk committees, and board-level governance forums on technology risk matters.

Key Responsibilities

Technology Risk Governance

• Establish and maintain the Enterprise Technology Risk Management Framework.
• Define technology risk policies, standards, methodologies, risk appetite, and governance processes.
• Ensure alignment with Enterprise Risk Management (ERM) and Group Risk requirements.

Enterprise Technology Risk Oversight

• Lead identification, assessment, monitoring, and reporting of risks across:
  • Cybersecurity & Information Security
  • Artificial Intelligence (AI) & Generative AI
  • Operational Technology (OT), ICT & IoT
  • Applications & Digital Platforms
  • Data Protection & Privacy
  • Third-Party & Supply Chain Technology Risk
  • Technology Projects & Digital Transformation
  • Business Continuity & Operational Resilience
• Oversee risk treatment plans and ensure timely remediation of control gaps.
• Work with OT lead/team on risk assessment and treatment

Risk Advisory & Business Partnership

• Provide independent technology risk advisory services to business and IT stakeholders.
• Support strategic initiatives, digital transformation, cloud adoption, AI implementation, and technology modernization programs.
• Challenge risk decisions and ensure alignment with organizational risk appetite.

Regulatory Compliance & Assurance

• Ensure compliance with applicable regulatory, legal, and industry requirements.
• Coordinate technology risk assessments, audits, certifications, and regulatory reviews.
• Monitor remediation of audit findings and compliance gaps.
• Develop and maintain technology risk dashboards, KRIs, KPIs, and executive reporting.
• Present technology risk posture, emerging threats, and key issues to management committees and senior leadership.
• Provide insights and recommendations to support risk-based decision-making.
• Promote a strong risk-aware culture across business and technology functions.
• Mentor and guide risk owners, control owners, and technology teams.
• Lead and develop a high-performing Technology Risk Management capability.

Cybersecurity Standard

• Develop, maintain, and continuously improve cybersecurity standards and security baselines for applications and IT infrastructure, aligned with industry best practices and organizational risk requirements.
• Develop, review, and maintain IT policies and governance frameworks to ensure security requirements are clearly defined, consistently implemented, and aligned with business and regulatory requirements.

Qualifications & Experience

Education

• Bachelor's Degree in Information Technology, Cyber Security, Risk Management, Computer Science, or related discipline.
• Master's Degree is an advantage.

Experience

• 8 - 10+ years of experience in Technology Risk, Cybersecurity, Information Security, IT Governance, IT Audit, or Enterprise Risk Management.
• Minimum 5 years in a leadership or management role.
• Experience in, shared services, manufacturing, industrial, or highly regulated environments is preferred.

Preferred Certifications

• ISO 27001 Lead Auditor / Lead Implementer
• CCSP or equivalent Cloud Security certification

Technical Knowledge

• NIST Cybersecurity Framework
• Cloud Security ( AWS, Aliyun, Google Cloud (Optional))
• Third-Party Risk Management
• Business Continuity & Operational Resilience
• OT knowledge (added advantage)

When you send us your resume and personal details, it is deemed you have provided your consent for us to keep or store your information in our database. All the information you have provided is only used for the recruitment process. Averis will only collect, use, process or disclose personal information where and when allowed to under applicable laws.
Only shortlisted candidates will be contacted for an interview. We endeavour to respond to every applicant. However, if you receive no response from us within 60 days, please consider your application for this specific position unsuccessful. We may contact you in the future if there are opportunities that match your qualifications and experience. Thank you for considering a career with Averis.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

Established in 2006, Averis is recognised as a multinational Global Business Services and Solutions provider that specialises in Finance & Accounting, Human Resources, IT Project & Operation, Shipping Documentation, Change Management, Recruitment Process Outsourcing, Corporate Function Services, and Digital.

We’re currently headquartered in Kuala Lumpur, Malaysia, and have recently expanded to Penang, Dubai, Brazil, and Indonesia. To date, we support our customers across various industries that range from manufacturing to RSPO certified palm, and clean and renewable energy.

Established in 2006, Averis is recognised as a multinational Global Business Services and Solutions provider that specialises in Finance & Accounting, Human Resources, IT Project & Operation, Shipping Documentation, Change Management, Recruitment Process Outsourcing, Corporate Function Services, and Digital.

We’re currently headquartered in Kuala Lumpur, Malaysia, and have recently expanded to Penang, Dubai, Brazil, and Indonesia. To date, we support our customers across various industries that range from manufacturing to RSPO certified palm, and clean and renewable energy.

Perks and benefits Medical, dental, and optical benefits Cross-functional training Overseas postings and short-term secondments Learning and development programmes Reward and recognition awards Exciting recreational & employee engagement Opportunities for job rotations Professional membership subscriptions fees