Security Governance Lead: Risk & Audit

Boost; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Boost Digital Bank is seeking a Security Governance Assistant Manager in Kuala Lumpur, Malaysia to provide consultation on information security and key technology risk matters and to help foster a strong information security risk culture. The role will coordinate governance initiatives and participate in related audit engagements with auditors and regulators.

Responsibilities include facilitating cyber and technology risk assessments, managing information security policies, and supporting risk

Qualifications

• Bachelor's Degree in IT, CS or related discipline.
• At least 5 years in governance, risk management & compliance, IT audit or risk management.
• Financial/fintech experience with regulatory requirements (e.g. RMiT).
• CISA or CRISC qualifications are an advantage.
• Exposure to information security standards.
• Strong collaboration and communication skills.

Responsibilities

• Provide consultation and advisory on information security and key technology risk matters.
• Coordinate governance initiatives and audits with auditors/regulators.
• Facilitate and manage cyber and technology risk assessments based on regulatory requirements.
• Manage internal information security policies and standards.
• Facilitate risk evaluations and exception handling for deviations.
• Support management reporting and escalation with information security metrics.
• Govern specialised areas under information security such as cloud security, IAM, and application security.

Skills

Governance & Compliance

IT audit

Risk assessment

Regulatory knowledge

Communication skills

Education

Bachelor's degree in IT/CS

Job description

Boost Digital Bank is seeking a Security Governance Assistant Manager in Kuala Lumpur, Malaysia to provide consultation on information security and key technology risk matters and to help foster a strong information security risk culture. The role will coordinate governance initiatives and participate in related audit engagements with auditors and regulators.

Responsibilities include facilitating cyber and technology risk assessments, managing information security policies, and supporting risk