Lead - Data Centre Outsourcing & Third-Party Risk Management

Great Eastern; Kuala Lumpur; On-site; MYR 100,000 - 150,000; Full time

Job summary

A leading financial services provider is seeking a Lead for Data Centre Outsourcing & Third-Party Risk Management in Kuala Lumpur. This role focuses on managing vendor relationships and ensuring compliance with risk management standards. Candidates should possess a Bachelor’s degree in IT and have at least 8 years of relevant experience. The position requires strong communication and organizational skills to manage daily operations and vendor assessments effectively.

Qualifications

• At least 8 years of relevant experience in data centre facilities, vendor outsourcing review, contract management, and IT infrastructure risk management.
• Familiarity with TPRM frameworks and risk assessment processes.
• Hands-on knowledge of data centre facilities processes and best practices.

Responsibilities

• Manage data centre outsourcing and third-party risk compliance.
• Oversee daily activities of outsourced data centre vendors.
• Perform TPRM processes including vendor due diligence and risk assessments.
• Coordinate and track maintenance and incident response activities.

Skills

Vendor management

Risk assessment

Attention to detail

Communication skills

Education

Bachelor’s Degree in Computer Science / IT or Diploma with Professional Certifications

Job description

Lead - Data Centre Outsourcing & Third-Party Risk Management (240001WB)

This role focuses on managing data centre outsourcing and oversee third-party risk compliance in ensuring that external data centre services providers deliver secure, reliable, and cost-effective infrastructure services in line with business needs and regulatory requirements. You will be the bridge between our organisation and data centre vendors, ensuring contractual obligations, service levels, and risk controls are met at all times.

Oversee daily activities of outsourced data centre vendors, ensuring smooth operations and adhere to SLAs, KPIs, and contractual terms.

Perform TPRM processes, including vendor due diligence, risk assessments, periodic reviews, and remediation follow-ups.

Coordinate and track planned maintenance, change requests, incident response, and recovery activities.

Monitoring data centre capacity, environmental conditions, and operational performance metrics.

Verify vendor compliance with security policies, safety regulations, and industry standards such as Risk Management in Technology (RITM), Threat, Vulnerability, and Risk Assessment (TVRA), Uptime Institute, PCI-DC, etc.

Participate in vendor site visits, audits, and operational inspections.

Prepare regular performance and risk reports for management review.

Liaise with internal teams (IT, compliance, procurement, etc) to address vendor-related risks or issues promptly.

Maintain accurate documentation for vendor contracts, performance records, and risk assessments.

Proactive and detail-oriented professional to manage day-to-day outsourced data centre facilities operations and active role in Third-Party Risk Management (TPRM) activities. This is a hands‑on role that involves coordinating closely with external service providers, ensuring compliance with operational, security, and risk requirements to maintain high standards of service, resilience, and risk control.

Bachelor’s Degree in Computer Science / IT or Diploma with Professional Certifications in related field.

At least 8 years relevant experience in data centre facilities, vendor outsourcing review, contract management and IT infrastructure risk management.

Familiarity with TPRM frameworks, vendor due diligence, and risk assessment processes.

Hands‑on knowledge of data centre facilities processes and best practices.

Strong organisational skills with attention to detail and the ability to work independently.

Good communication skills for effective coordination with vendors and internal stakeholders.

Ability to respond quickly to operational or compliance issues.