Senior Analyst, Technology Risk

Kenanga Investment Bank; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading financial institution in Kuala Lumpur is seeking a Technology Risk Manager to oversee technology risk management practices. The successful candidate will manage risks, ensure compliance with regulatory standards, and document system governance. Requires a Bachelor's in IT and professional certifications like CISM or CISA, plus relevant experience. This role offers a strategic opportunity in a dynamic financial environment.

Qualifications

• Minimum 3 years of working experience in IT Risk, preferably within a financial institution.
• Minimum 3 years of IT Audit experience, either as a Compliance Manager or IT Auditor.
• 2–3 years of management experience in an Information Technology function.

Responsibilities

• Define scope of technology key risk and its key risk indicators.
• Assess effectiveness of incident tracking, management, and reporting.
• Document system risk governance and methodology.

Skills

Risk identification

Incident management

Governance compliance

Education

Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or Computer Science

Tools

CISM

CISA

CRISC

Job description

Overview

Reporting to Head of Technology Risk and BCM. Develop and implement prescribed Technology risk management methods, tools and frameworks as well as provide assurance that risks are managed/controlled in line with approved risk appetite and in compliance with both internal and regulatory requirements.

Responsibilities

• Information Security Controls Management and Risk Governance: Define scope of technology key risk and its key risk indicators.
• Work with various departments on risk identification, risk assessment, and risk mitigation control.
• Assess effectiveness of incident tracking, management, and reporting.
• Provide advice and early warning alerts to management based on emerging security threats, IT infrastructure, or potential IT strategic issues on new ventures.
• Document system risk governance and methodology, and information security policy and standards to be in line with regulatory guidelines. This will be a joint effort with the IT department.
• Support the CISO function.

Rules & Regulations/Statutory and Policies Requirements & Compliance

• Development and implementation of technology risk-related policies and procedures.
• Document system risk governance and methodology, and information security policy and standards to be in line with regulatory guidelines. This will be a joint effort with the IT department.
• Periodic IT risk management report to GORC, GRC, GBRC, and the Board.

Job Requirements

• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or Computer Science
• Professional certification such as CISM, CISA, or CRISC
• Experience: Minimum 3 years of working experience in IT Risk, preferably within a financial institution
• Minimum 3 years of IT Audit experience, either as a Compliance Manager or IT Auditor
• 2–3 years of management experience in an Information Technology function