Senior Analyst, Technology Risk & Governance

Kenanga Investment Bank; Kuala Lumpur; On-site; MYR 75,000 - 95,000; Full time

Job summary

A leading financial institution in Kuala Lumpur is looking for a Senior Analyst in Technology Risk & Governance. The role involves developing risk management frameworks, assessing IT risks, and ensuring compliance with regulatory standards. Candidates should have a Bachelor's degree in IT and relevant certifications. Experience in IT Audit and risk management within financial institutions is essential.

Qualifications

• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or Computer Science.
• Professional certification such as CISM, CISA, or CRISC.
• Minimum 3 years of working experience in IT Risk within a financial institution.

Responsibilities

• Define scope of technology risk and its key risk indicators.
• Conduct risk assessment and mitigation control.
• Provide advice to management on emerging security threats.

Skills

Risk identification

Incident management

Policy development

Education

Bachelor's degree in Information Technology

CISM, CISA, or CRISC certification

Job description

Senior Analyst, Technology Risk & Governance

Reporting to Head of Technology Risk and BCM. Develop and implement prescribed Technology risk management methods, tools and frameworks as well as provide assurance that risks are managed/controlled in line with approved risk appetite and in compliance with both internal and regulatory requirements.

Information Security Controls Management and Risk Governance

• Define scope of technology key risk and its key risk indicators.
• Work with various departments on risk identification, risk assessment, and risk mitigation control.
• Assess effectiveness of incident tracking, management, and reporting.
• Provide advice and early warning alerts to management based on emerging security threats, IT infrastructure, or potential IT strategic issues on new ventures.
• Document system risk governance and methodology, and information security policy and standards to be in line with regulatory guidelines. This will be a joint effort with the IT department.
• Support the CISO function

Rules & Regulations/Statutory and Policies Requirements & Compliance

• Development and implementation of technology risk-related policies and procedures.
• Document system risk governance and methodology, and information security policy and standards to be in line with regulatory guidelines. This will be a joint effort with the IT department.
• Periodic IT risk management report to GORC, GRC, GBRC, and the Board.

Job Requirements

Education and Certifications

• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or Computer Science
• Professional certification such as CISM, CISA, or CRISC

Experience

• Minimum 3 years of working experience in IT Risk, preferably within a financial institution
• Minimum 3 years of IT Audit experience, either as a Compliance Manager or IT Auditor
• 2–3 years of management experience in an Information Technology function

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.