Lead, Technology Risk & Governance

Tech Staffing; Kuala Lumpur; On-site; MYR 180,000 - 360,000; Full time

Job summary

Tech Staffing partners with a Fintech firm to hire a Lead, Technology Risk & Governance to oversee security governance across Asia operations. The role focuses on ensuring compliance with ISO 27001, PCI DSS, managing security risks and implementing Governance, Risk, and Compliance (GRC) tools and processes.

You will lead risk assessments, audit support, and act as SME for security certifications, while collaborating with business leaders to deploy security frameworks and controls.

Qualifications

• 8+ years in IT Security, Data Protection, Governance, Risk Management or Audit.
• Certified CISSP/CISA/CISM preferred.
• Strong knowledge of cloud security, data protection and governance frameworks (COBIT/ISO 27001).

Responsibilities

• Lead security governance across Asia operations and align with policies and regulatory standards.
• Ensure ISO 27001 and PCI DSS compliance and support certifications.
• Act as SME for risk mitigation, certifications and ongoing security/regulatory requirements.
• Conduct risk assessments, audits and support accreditation for internal and outsourced activities.
• Be the main contact for external audit activities.
• Develop and maintain the Security Management System (SMS).
• Collaborate with leaders to deploy security frameworks and controls.
• Lead investigations into security incidents and provide actionable reports to management.
• Monitor cloud security across AWS, Azure, GCP, Kubernetes and data protection practices.
• Utilize Grafana, Kibana, Power BI to manage and report security posture.

Skills

IT Security

Data Protection

Governance

Risk Management

Audit

Cloud Security

Education

Bachelor’s degree in IT or related field

Tools

Grafana

Kibana

Power BI

Job description

Summary

We are partnering with a Fintech firm, in search of Lead, Technology Risk & Governance to lead and oversee business security governance across their Asia operations. This role focuses on ensuring compliance with ISO 27001, PCI DSS, managing security risks and implementing Governance, Risk, and Compliance (GRC) tools and processes.

Responsibilities:

• Lead business security governance across Asia operations, ensuring alignment with policies and the local’s regulatory standards.
• Ensure compliance with ISO 27001 and PCI DSS and support other certifications
• Act as a Subject Matter Expert (SME) for risk mitigation strategies, certifications and the maintenance of ongoing security and regulatory requirements
• Conduct risk assessments, audits, and support accreditation efforts for both internal and outsourced activities
• Be the main contact point of external audit activities
• Develop and maintain the Security Management System (SMS)
• Collaborate with business leaders to deploy security frameworks and controls
• Lead investigations into security incidents and provide actionable reports to management
• Monitor and advise on cloud security, including AWS, Azure, GCP, Kubernetes, serverless technologies, and data protection practices
• Utilize GRC tools (Grafana, Kibana, Power BI) to manage and report on security posture

Requirements:

• Bachelor’s degree in IT or a related field.
• A minimum of 8 years of experience in IT Security, Data Protection, Governance, Risk Management or Audit
• Preferred certifications: CISSP, CISA, CISM
• Strong knowledge of IT and OT security, cloud security and data protection
• Knowledge of COBIT, ISO 27001 and GRC platforms