Principal Specialist, Cyber & Technology Risk (Cyber Risk)

Fairview International School; Malaysia; Hybrid; MYR 320,000 - 420,000; Full time

Job summary

Payments Network Malaysia Sdn Bhd (PayNet) seeks a Principal Specialist, Cyber & Technology Risk to own enterprise cyber risk governance. You will shape governance frameworks, policies, and standards across the organization and serve as the trusted authority on cyber risk judgment.

In this role you will lead regulatory and standards compliance assessments, build central cyber risk dashboards for executive decisions, and guide incident response and regulatory notifications while coordinating with

Qualifications

• Deep experience in cyber and technology risk governance within regulated environments.
• Strong judgment to balance innovation, resilience, and regulatory expectations.
• Ability to translate complex cyber risk into clear executive-level decisions.
• Credibility built through recognised cyber or risk certifications.

Responsibilities

• Shape and own PayNet’s cyber risk governance frameworks, policies, and standards
• Build and run a central cyber risk dashboard that drives executive decisions
• Lead cyber regulatory and standards compliance assessments and remediation tracking
• Drive the execution of PayNet’s cybersecurity strategy across stakeholders
• Oversee cyber risk exposure across PayNet and its participant ecosystem
• Decide and advise during cyber incidents, including regulatory notification readiness

Skills

Cyber risk governance

Regulatory compliance

Executive decision-making

Certifications (cyber/risk)

Job description

Principal Specialist, Cyber & Technology Risk (Cyber Risk)

• PayNet operates national payment infrastructure where cyber failure has systemic impact
• Threat sophistication and ecosystem interdependencies are increasing faster than legacy controls
• Regulators expect defensible, enterprise‑level cyber risk judgment, not technical assurance alone
• The Board requires clearer visibility into cyber exposure and decision trade‑offs
• This role anchors trust as PayNet scales innovation across a national participant ecosystem

TL;DR

• Own enterprise-wide cyber and technology risk governance for PayNet
• Decide how cyber risks are assessed, surfaced, and escalated to the Board
• Lead regulatory and standards-based cyber compliance across the organisation
• Act as PayNet’s trusted authority on cyber risk judgment and assurance

Why This Role Matters

• Cyber risk failures directly threaten national payment stability and trust
• Regulators and the Board rely on this role for clear, defensible risk insight
• Strong cyber governance enables PayNet to innovate safely at national scale
• This role sets the maturity bar for PayNet’s cyber risk management

What You Will Actually Do

• Shape and own PayNet’s cyber risk governance frameworks, policies, and standards
• Build and run a central cyber risk dashboard that drives executive decisions
• Lead cyber regulatory and standards compliance assessments and remediation trackingFixes for code - omitted because not required for final answer
• Drive the execution of PayNet’s cybersecurity strategy across stakeholders
• Oversee cyber risk exposure across PayNet and its participant ecosystem
• Decide and advise during cyber incidents, including regulatory notification readiness

Examples of This Role in Practice

• Present a clear cyber risk position to the Board to support a major platform decision
• Challenge control effectiveness and require remediation before risk acceptance
• Lead a Bank Negara Malaysia – Risk Management in Technology (BNM RMiT) or National Cyber Security Agency (NACSA) compliance review and close material gaps
• Advise executives during a cyber incident on classification and regulatory triggers
• Escalate emerging ecosystem risks before they crystallise into systemic issues

What Will Help You Succeed

• Deep experience in cyber and technology risk governance within regulated environments
• Strong judgment to balance innovation, resilience, and regulatory expectations
• Ability to translate complex cyber risk into clear executive‑level decisions
• Confidence to challenge stakeholders and defend risk positions independently
• Credibility built through recognised cyber or risk certifications

Embark on an exciting career journey with Payments Network Malaysia Sdn Bhd (PayNet), the heartbeat of Malaysia's financial markets!

As the national payments network and a pivotal infrastructure for Malaysia’s dynamic financial markets, PayNet is a linchpin in advancing the nation’s digital economy.

Our comprehensive suite of retail payment solutions - encompassing DuitNow (QR and P2P), JomPAY (Bill Payments), FPX (Online), MyDebit (Domestic Debit), MEPS (ATM), and IBG (Interbank GIRO) - not only offer wide accessibility but are seamlessly integrated into the fabric of daily life in Malaysia. These services have revolutionised the way Malaysians handle financial transactions, marking a significant leap in consumer convenience and efficiency.

At PayNet, our focus is on providing a safe, efficient, and innovative payments system. We are dedicated to improving and managing payment services that meet the evolving needs of consumers and businesses. Our work ensures the stability and reliability of Malaysia’s financial system, supporting the growth of the economy.

Learn more about our work and how we are contributing to Malaysia's financial future at www.paynet.my.

Join us in embracing digital payments and advancing Malaysia's financial landscape.