Lead: Third-Party Risk & Cybersecurity Due Diligence

OCBC; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Learning & development opportunities

Wellbeing programs

Job summary

OCBC Bank Malaysia in Kuala Lumpur is seeking a risk professional to lead due diligence for third-party service arrangements, focusing on technology, cybersecurity and operational resilience risks.

The role involves independent risk assessments, issue management, and advisory support to ensure compliance with regulatory requirements and internal policies. Collaboration with policy, procurement, Compliance and Legal is essential.

Qualifications

• Degree in Information Security, Cybersecurity, IT Risk or related field.
• 5-8 years of experience in TPRM, technology risk, cybersecurity, IT audit or due diligence.
• Strong knowledge of regulatory requirements and vendor risk management.

Responsibilities

• Customise risk questionnaires to regulatory requirements and evolving risks.
• Conduct comprehensive due diligence including site visits and control assessments.
• Evaluate vendor controls in information security, cloud, data protection and IT resilience.
• Identify gaps, propose mitigation and track remediation actions.
• Prepare risk reports and dashboards for stakeholders.

Skills

TPRM

Technology Risk

Cybersecurity

IT audit

Vendor due diligence

Education

Degree in Information Security

Tools

Power Platform

Microsoft 365

Job description

OCBC Bank Malaysia in Kuala Lumpur is seeking a risk professional to lead due diligence for third-party service arrangements, focusing on technology, cybersecurity and operational resilience risks.

The role involves independent risk assessments, issue management, and advisory support to ensure compliance with regulatory requirements and internal policies. Collaboration with policy, procurement, Compliance and Legal is essential.