Principal Tech Risk Governance & Controls Lead

AIA Malaysia; Kampung Malaysia Tambahan; On-site; MYR 180,000 - 240,000; Full time

Job summary

AIA Malaysia is seeking a seasoned Technology and Cybersecurity Risk professional to strengthen governance, risk, and compliance across IT and cyber domains. The role emphasizes oversight of risk appetite, audits, and regulatory alignment within the Malaysian financial landscape.

The successful candidate will lead assessments, collaborate with governance forums, and ensure timely remediation of risk issues, with a strong emphasis on cloud and operational controls in a complex insurance

Qualifications

• Bachelor's degree in IT or related field (or equivalent).
• Minimum 8 years of experience in information and cybersecurity risk management.
• Industry certifications such as CISSP/CISA/CISM/CRISC/CGEIT are a plus.
• Solid understanding of IT and security operations, including cloud.
• Strong ability to synthesize diverse information into risk conclusions.

Responsibilities

• Assist in maintaining technology risk governance framework and certifications.
• Support regulatory compliance with Bank Negara Malaysia's policies.
• Develop and review IT and Cybersecurity Risk Appetite statements.
• Provide governance oversight for technology and cybersecurity risks.
• Coordinate Information Security Working Committee and governance forums.
• Lead control and risk assessments across technology domains.
• Document, track, and report risk assessment findings and actions.
• Prepare and report key risk metrics for management review.
• Support audits and regulatory compliance activities.
• Conduct third‑party security risk assessments and supply chain risk management.
• Track and close audit findings and monitor external threat intelligence.

Skills

Communication skills

Analytical mindset

Regulatory knowledge

Risk management

Interpersonal skills

Education

Bachelor's degree in IT/related field

Job description

AIA Malaysia is seeking a seasoned Technology and Cybersecurity Risk professional to strengthen governance, risk, and compliance across IT and cyber domains. The role emphasizes oversight of risk appetite, audits, and regulatory alignment within the Malaysian financial landscape.

The successful candidate will lead assessments, collaborate with governance forums, and ensure timely remediation of risk issues, with a strong emphasis on cloud and operational controls in a complex insurance