Security Governance Lead - Risk, Policy & Compliance

Boost Holdings Sdn Bhd; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Job summary

Boost Digital Bank seeks an experienced Security Governance Assistant Manager to advise on information security and regulatory matters, driving risk culture and owning policies and standards.

You will facilitate risk assessments, coordinate audits and regulatory engagements, and oversee governance across security domains including cloud, IAM, and vulnerability management. Strong communication and cross-functional collaboration are essential.

Qualifications

• Bachelor's degree in IT or related discipline.
• At least 5 years in IT with 2 years in Governance, Risk Management & Compliance, IT audit or risk management.
• Experience in financial/fintech with knowledge of RMiT.
• CISA, CRISC, CISM or CISSP qualifications are a plus.
• Knowledge of ISO 27001, NIST, CIS Controls and practical application.
• Experience developing information security policies and procedures.
• Experience facilitating audit engagements and management responses.
• Familiarity with cloud security, IAM, application security and vulnerability management.
• Strong analytical and documentation skills; ability to explain risk in business terms.
• Team-oriented and strong communication skills.

Responsibilities

• Provide consultation on information security policies and standards.
• Facilitate security risk and control assessments.
• Coordinate governance and audit/regulatory engagements.
• Track regulatory submissions and remediation status.
• Govern specialised security domains (cloud security, IAM, application security, vulnerability management).
• Prepare governance reporting and management papers.

Skills

Governance & Compliance

Information Security

Audit & Regulatory

Policy Development

Cross-functional Collaboration

Analytical Thinking

Communication Skills

Risk Management

Education

Bachelor's Degree in IT or related discipline

Tools

ISO 27001

NIST

CIS Controls

Job description

Boost Digital Bank seeks an experienced Security Governance Assistant Manager to advise on information security and regulatory matters, driving risk culture and owning policies and standards.

You will facilitate risk assessments, coordinate audits and regulatory engagements, and oversee governance across security domains including cloud, IAM, and vulnerability management. Strong communication and cross-functional collaboration are essential.