Lead - Data Centre Outsourcing & Third-Party Risk Management

Great Eastern; Cyberjaya; On-site; MYR 80,000 - 120,000; Full time

Job summary

A major financial services company is seeking a Lead - Data Centre Outsourcing & Third-Party Risk Management professional in Cyberjaya, Malaysia. The role requires overseeing vendor operations, ensuring compliance with SLAs and risk assessments. Candidates should have at least 8 years of relevant experience in data centre management and possess strong skills in vendor and risk management. This hands-on position emphasizes effective coordination and communication with both external vendors and internal teams.

Qualifications

• 8+ years of relevant experience in data centre facilities and vendor management.
• Familiarity with Third-Party Risk Management (TPRM) frameworks and processes.
• Strong organizational skills and attention to detail.

Responsibilities

• Manage daily activities of data centre vendors and ensure compliance with SLAs.
• Perform vendor due diligence and risk assessments.
• Coordinate maintenance and incident response activities.

Skills

Vendor management

Risk assessment

Communication skills

Organizational skills

Problem-solving

Education

Bachelor’s Degree in Computer Science / IT or diploma with certifications

Job description

Lead - Data Centre Outsourcing & Third-Party Risk Management

This role focuses on managing data centre outsourcing and oversee third-party risk compliance in ensuring that external data centre services providers deliver secure, reliable, and cost-effective infrastructure services in line with business needs and regulatory requirements. You will be the bridge between our organisation and data centre vendors, ensuring contractual obligations, service levels, and risk controls are met at all times.

Oversee daily activities of outsourced data centre vendors, ensuring smooth operations and adhere to SLAs, KPIs, and contractual terms.

Perform TPRM processes, including vendor due diligence, risk assessments, periodic reviews, and remediation follow-ups.

Coordinate and track planned maintenance, change requests, incident response, and recovery activities.

Monitoring data centre capacity, environmental conditions, and operational performance metrics.

Verify vendor compliance with security policies, safety regulations, and industry standards such as Risk Management in Technology (RITM), Threat, Vulnerability, and Risk Assessment (TVRA), Uptime Institute, PCI-DC, etc.

Participate in vendor site visits, audits, and operational inspections.

Prepare regular performance and risk reports for management review.

Liaise with internal teams (IT, compliance, procurement, etc) to address vendor-related risks or issues promptly.

Maintain accurate documentation for vendor contracts, performance records, and risk assessments.

Proactive and detail-oriented professional to manage day-to-day outsourced data centre facilities operations and active role in Third-Party Risk Management (TPRM) activities. This is a hands-on role that involves coordinating closely with external service providers, ensuring compliance with operational, security, and risk requirements to maintain high standards of service, resilience, and risk control.

Bachelor’s Degree in Computer Science / IT or Diploma with Professional Certifications in related field.

At least 8 years relevant experience in data centre facilities, vendor outsourcing review, contract management and IT infrastructure risk management.

Familiarity with TPRM frameworks, vendor due diligence, and risk assessment processes.

Hands-on knowledge of data centre facilities processes and best practices.

Strong organisational skills with attention to detail and the ability to work independently.

Good communication skills for effective coordination with vendors and internal stakeholders.

Ability to respond quickly to operational or compliance issues.