Risk Regulatory & Compliance Advisor

Bank Islam; Kuala Lumpur; On-site; MYR 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Technology Risk Regulatory and Compliance Officer to ensure adherence to regulatory requirements. This role involves assessing and enhancing technology risk compliance across the organization. You will conduct reviews, liaise with auditors and regulators, and communicate regulatory updates to stakeholders. Ideal candidates will have a background in IT or related fields, with experience in risk management and compliance. Join a dynamic team dedicated to maintaining high standards of technology compliance and risk management in a fast-paced environment.

Qualifications

• 3+ years in information security, risk management, or compliance.
• Familiarity with BNM, PCI-DSS, and regulatory standards.

Responsibilities

• Ensure compliance with regulatory requirements for technology risk.
• Conduct regulatory reviews and assessments for the BIMB Group.

Skills

Regulatory Compliance

Risk Management

IT Governance

Cybersecurity Policies

Audit

Education

Bachelor's degree in IT

Tools

Risk Assessment Tools

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert: Create Alert

Summary

The Technology Risk Regulatory and Compliance Officer is responsible for ensuring compliance with regulatory requirements, particularly Bank Negara Malaysia's Risk Management in Technology (BNM RMiT) policy document, Securities Commission Malaysia’s Guidelines on Technology Risk Management, Labuan Financial Services Authority’s Guidelines on Technology Risk Management, and internal technology risk frameworks. The role involves assessing, monitoring, and enhancing technology risk compliance and regulatory adherence across the BIMB Group.

Duties and Responsibilities:

1. Planning, Development, Reviewing & Reporting

• Assist in planning technology compliance review/assessment
• Assist in preparation of compliance review/assessment report
• Establish technology compliance work program and review pack
• Monitor the progress of issues tracking arising from compliance review/assessment
• Monitor compliance status updates for monthly/quarterly reporting to management committee
• Oversee User Access Matrix (UAM) review for regulatory systems (e.g., Fibox, Kijangnet, ORION) and other systems

Technology Compliance Review

• Conduct regulatory reviews on technology/system-related areas for BIMB Group
• Conduct independent assessments on technology/system-related areas based on risk assessment outcomes

Technology Compliance Liaison and Advisory

• Assist in serving as liaison to auditors, consultants, and regulators regarding documentation and review of Technology Compliance
• Liaise with other business units within the Bank to manage stakeholder inquiries or concerns on regulatory matters related to technology/systems

Communication and Assessment on Regulatory Requirements

• Disseminate, coordinate, and identify regulatory requirements/submissions applicable to technology and information systems
• Monitor timely communication and updates provided to stakeholders on new and revised policy documents
• Engage with relevant stakeholders to perform compliance assessments and gap analyses on new/revised technology regulatory guidelines
• Review compliance progress on gap closures related to BNM policy documents
• Ensure timely submission of related documents/requests to BNM
• Review policies and procedures related to technology/systems to ensure relevance with regulatory requirements

Qualifications

• Bachelor's degree in IT, Computing, Information Systems, or related fields

Years of Experience

• 3 or more years in information security, risk management, audit, or compliance in technology areas
• Preferably from one of the top 4 consulting firms

Skills, Knowledge, and Certifications

• Familiarity with security/technology regulations, standards, and best practices issued by BNM, PCI-DSS, Paynet, Securities Commission, etc.
• Experience in Technology Risk Management, IT Governance, IT Compliance, or IT Audit is advantageous
• Knowledge in:
• Financial institutions and business processes
• Technology and cybersecurity policies and standards
• Risk assessment tools, technologies, and methods
• Enterprise and operational risk frameworks
• Regulatory compliance
• Technology resiliency

Self-starter, capable of working independently or with minimal supervision