Senior Cybersecurity & Risk Governance Lead

Monee; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Monee Malaysia, part of Sea Limited, seeks a Senior Information Security Specialist to safeguard digital assets across ShopeePay and Monee Malaysia. You will lead risk assessments, guide security policies, and oversee incident response to maintain a strong security posture and regulatory compliance.

The role requires 5–7 years in information security with at least 3 years in a senior capacity, plus certifications such as CISSP, CISM, CEH, CRISC or similar.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5–7 years of direct experience in an Information Security/Cybersecurity role, with at least 3 years in a senior capacity.
• Certifications in IT Risk and Cybersecurity (CC, CEH, CISSP, CISM, CRISC) or similar.

Responsibilities

• Lead the development and maintenance of information security frameworks, policies, and guidelines.
• Oversee security risk assessments, audits, and gap analyses to identify threats and remediation.
• Manage information security incident response, containment, and root-cause analysis.
• Coordinate regulatory/compliance reporting for technology matters to management and boards.
• Collaborate with DevSecOps, IT, and engineering teams to embed security in SDLC and cloud architectures.
• Develop security awareness programs and mentor junior staff.

Skills

Security risk assessment

Incident response leadership

Regulatory compliance

Security governance

Communication skills

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity or related field

CISSP

CISM

CEH

CRISC

CC

Tools

SIEM

DLP

IDS/IPS

EDR

Vulnerability scanning tools

Python scripting

PowerShell

Job description

Monee Malaysia, part of Sea Limited, seeks a Senior Information Security Specialist to safeguard digital assets across ShopeePay and Monee Malaysia. You will lead risk assessments, guide security policies, and oversee incident response to maintain a strong security posture and regulatory compliance.

The role requires 5–7 years in information security with at least 3 years in a senior capacity, plus certifications such as CISSP, CISM, CEH, CRISC or similar.