Senior Cybersecurity Risk & Governance Lead

EPF Malaysia; Petaling Jaya; On-site; MYR 200,000 - 250,000; Full time

Job summary

A leading national pension fund is looking for a Cybersecurity Risk Management Advisor to enhance cybersecurity governance and conduct risk assessments. The ideal candidate should possess a Bachelor's degree in IT or Cybersecurity and have at least 7 years of experience in IT security or risk management. Proficiency in various cyber risk frameworks and strong analytical skills are essential. The role involves collaborating with multiple teams and reporting on cybersecurity risk policies.

Qualifications

• 7+ years of experience in IT security or cybersecurity risk management.
• Proficiency in cyber risk frameworks and risk quantification methods.
• Excellent communication and analytical skills.

Responsibilities

• Research and analyze emerging cybersecurity threats.
• Develop policies to address security needs.
• Provide cybersecurity advisory for business initiatives.
• Review IT change requests and recommend mitigation strategies.
• Participate in cybersecurity simulation exercises.
• Partner with SOC team for breach impact assessments.
• Lead threat modeling and risk scoring.
• Monitor risk mitigation plans.
• Liaise with internal committees on IT risk and security governance.
• Prepare reports on cybersecurity risk posture.

Skills

Analytical thinking

Communication

Stakeholder engagement

Education

Bachelor's Degree in Computer Science/ Information Technology or Cybersecurity

Tools

BNM’s RMiT

NIST RMF

CIS

MITRE ATT&CK

FAIR

NIST SP 800-37

ISO 27001

Job description

A leading national pension fund is looking for a Cybersecurity Risk Management Advisor to enhance cybersecurity governance and conduct risk assessments. The ideal candidate should possess a Bachelor's degree in IT or Cybersecurity and have at least 7 years of experience in IT security or risk management. Proficiency in various cyber risk frameworks and strong analytical skills are essential. The role involves collaborating with multiple teams and reporting on cybersecurity risk policies.