Security & Risk Governance Manager

Prudential plc; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Eastspring, Kuala Lumpur, is seeking a Manager to lead Governance, Security, Risk & Compliance (GSRC). The role focuses on developing and delivering the local IT security programme, policy implementation, and risk management across the organization in a regulated financial services setting.

The candidate will drive security governance, manage vulnerabilities, oversee IAM controls, and coordinate third‑party risk with senior stakeholders.

Qualifications

• 8–12 years of experience across information security, technology risk, IT audit, IT governance or regulatory compliance.
• Experience in financial services or regulated industries strongly preferred.
• Certifications such as CISM, CISSP, CRISC or CISA are preferred.
• Bachelor’s degree in Information Security, Computer Science, Information Technology, Information Systems, Risk Management or related discipline.

Responsibilities

• Develop, maintain and execute the local IT Security Programme and multi-year security roadmap.
• Coordinate implementation of Group information security policies, standards and controls.
• Lead risk assessments for apps, projects and infrastructure changes.
• Manage vulnerability and patch governance across tech envs.
• Oversee IAM governance, access reviews and governance documentation.
• Lead third‑party security oversight and vendor risk assessments.
• Coordinate cyber resilience, incident governance and crisis response.
• Prepare management reporting for security, risk and compliance forums.
• Maintain governance records, evidence repositories and audit artifacts.
• Provide leadership to the GSRC team and manage stakeholder communications.

Skills

IT governance

Security governance

Risk management

Audit readiness

Vendor risk management

Education

Bachelor's degree in Information Security / related field

Job description

Eastspring, Kuala Lumpur, is seeking a Manager to lead Governance, Security, Risk & Compliance (GSRC). The role focuses on developing and delivering the local IT security programme, policy implementation, and risk management across the organization in a regulated financial services setting.

The candidate will drive security governance, manage vulnerabilities, oversee IAM controls, and coordinate third‑party risk with senior stakeholders.