Regional Information Security Leader

Principal Malaysia; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Principal Financial Group in Malaysia seeks an Information Security Officer to oversee the information security program regionally, aligning with enterprise policies and regulatory obligations. The role partnerships with the PI BISO and local leadership to ensure consistent security practices and effective reporting to management.

The candidate will manage security domains, risk assessments and remediation activities, while driving awareness and collaboration across business units to strengthen

Qualifications

• Bachelor’s degree in Computer Science, Information Security or related field.
• 8–10 years of information security experience in regional or multi-site settings.
• Knowledge of ISO 27001, NIST and COBIT.
• Experience with information security risk assessment and risk management.
• Strong communication and stakeholder management skills.
• CISSP, CISM, CRISC, GIAC or equivalent preferred.

Responsibilities

• Act as the primary local point of contact for Information Security with senior management and stakeholders.
• Establish and maintain relationships with local business, technology, risk, compliance, audit and privacy teams.
• Oversee the Information Security Program in line with enterprise policies and regulatory requirements.
• Provide governance across security domains including IAM, data protection, vulnerability management and third‑party risk.
• Identify, assess and report information security risks and remediation needs.
• Support security audits, regulatory reviews and incident response activities.
• Promote security awareness and a strong security culture across the organization.
• Prepare and communicate security updates and metrics to management and boards.

Job description

Principal Financial Group in Malaysia seeks an Information Security Officer to oversee the information security program regionally, aligning with enterprise policies and regulatory obligations. The role partnerships with the PI BISO and local leadership to ensure consistent security practices and effective reporting to management.

The candidate will manage security domains, risk assessments and remediation activities, while driving awareness and collaboration across business units to strengthen