Risk Specialist, Cyber Risk Specialist Unit

Bank Negara Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 230,000; Full time

Job summary

Bank Negara Malaysia is seeking a senior leader to promote development of sound risk measurement and mitigation infrastructure in cybersecurity for financial stability. The role emphasises strategic oversight, policy development, and collaboration with regulators and industry bodies to advance secure and resilient technologies.

Ideal candidates have extensive experience in cyber security risk management within the financial sector, with certifications such as CISM/CISSP and ISO27001 lead

Qualifications

• 10+ years in cyber security risk management and/or IT security/auditing.
• Experience in financial industry is preferred.
• Knowledge of regulatory requirements and compliance in financial sector (1LOD/2LOD preferred).
• Experience developing cyber security frameworks, policies or procedural documentation.

Responsibilities

• Oversee cybersecurity risk surveillance and thematic reviews to identify sector-wide vulnerabilities.
• Formulate and enhance cyber security risk management policies and frameworks; align with global standards.
• Engage internal stakeholders, financial institutions, industry bodies, and regulators to promote best practices.
• Lead development of cybersecurity strategies and governance for the financial sector.
• Develop surveillance infrastructure and tools for early detection of emerging risks.
• Provide advisory services to strengthen supervisors' capacity in cybersecurity management.

Skills

Cyber security

Risk management

Regulatory compliance

Framework development

Education

Undergraduate/postgraduate IT security

CISM

CISSP

ISO27001 lead auditor

CISA

Job description

Provide thought leadership and technical expertise in promoting development of sound risk measurement and mitigation infrastructure. Catalyze advancements in risk infrastructure as a key enabler for managing cyber security risk for financial stability by providing technical expertise rather than operational support. Solutions should challenge conventional thinking and push the boundaries of what is normally possible.

Key responsibilities include overseeing and spearheading of the following:

Cyber Security Risk Surveillance: Strategic monitoring of emerging cyber security risks and lead thematic reviews or deep-dive assessments to identify sector-wide vulnerabilities.

Policy and Guidance Development: Formulation and continual enhancement of cyber security risk management policies, frameworks, and technical advisories. Alignment with global standards and regulatory expectations to guide financial institutions in adopting secure, resilient, and sustainable technologies.

Stakeholder Engagement and Industry Collaboration: Continuous engagement with internal stakeholders, financial institutions, industry bodies, and international regulators. Collaborative initiatives to promote best practices, co-develop training and awareness programs, and influence the evolution of cyber security risk governance across the sector

PRINCIPAL ACCOUNTABILITIES

Lead the development and review cybersecurity requirements, protection strategies, architecture model, governance and risk mitigating measures for the financial sector based on changes identified in the threat landscape.

Lead and conduct horizontal assessment of risk management methodologies or practices to identify cybersecurity issues

Drive industry-wide risk infrastructure improvement initiatives on cyber security to ensure robust and continuously improving risk measurement and mitigation infrastructure in financial institutions (FIs)

Lead the development of cybersecurity strategies and framework for the financial sector.

Drive development of effective surveillance infrastructure and tools for early detection of emerging risks to aid macro and micro institution level monitoring.

Lead in formulation of course content, conduct training and providing advisory services to strengthen capacity of supervisors in cybersecurity management including managing expectation of stakeholders on cyber threats, vulnerabilities and risks.

Maintain strong collaboration with relevant stakeholders to influence and enhance on cybersecurity management and IT risk infrastructure developments and best practices.

Provide technical expertise and advisory in the efficient and effective management of the Bank on cybersecurity matters including research and environmental scanning of emerging internal and external threats, technology trends and directions in mitigating technology risks.

QUALIFICATIONS

Academic Qualifications

Undergraduate/postgraduate degree in information technology related disciplines (e.g. computer science), with primary focus on network security, IT security and/or cyber security.

Professional certifications related to information systems security, auditing, control, assurance and risk management such as Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), ISO27001 lead auditor, Certified Information System Auditor (CISA) is an added advantage

Experience

At least 10 years of experience in cyber security risk management and/or IT security / auditing, preferably within the financial industry.

Has working IT technical knowledge and strong understanding of regulatory requirements and compliance within the financial sector, with a mix of 1LOD and 2LOD experience being preferred

Experience in developing frameworks, policies or procedural documentation for the cyber security environment is preferred.

Hirer responsiveness Salary match Number of applicants

Bank Negara Malaysia, as the nation's Central Bank, is committed to excellence in promoting monetary and financial system stability and fostering a sound and progressive financial sector, to achieve sustained economic growth for the benefit of the nation. Bank Negara Malaysia also places high importance in its developmental role with respect to economic management, institutional building and the development of the financial system infrastructure.

The Bank invests heavily in nurturing our talent to enhance their performance and realising their potential. Targeted talent development and career growth opportunities, continues to be given focus to drive performance.

Bank Negara Malaysia, as the nation's Central Bank, is committed to excellence in promoting monetary and financial system stability and fostering a sound and progressive financial sector, to achieve sustained economic growth for the benefit of the nation. Bank Negara Malaysia also places high importance in its developmental role with respect to economic management, institutional building and the development of the financial system infrastructure.

The Bank invests heavily in nurturing our talent to enhance their performance and realising their potential. Targeted talent development and career growth opportunities, continues to be given focus to drive performance.

To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.

Researching careers? Find all the information and tips you need on career advice.