Senior Data & Privacy Governance Leader

GAMUDA; Petaling Jaya; Vor Ort; MYR 120.000 - 180.000; Vollzeit

Zusammenfassung

Gamuda Berhad is seeking a Senior Executive to lead data governance and information security programs. The role ensures ISO 27001 ISMS implementation, privacy framework deployment, and cross‑functional alignment with regulatory expectations.

The candidate will manage risk assessments, data lifecycle protections, and regulatory audits while partnering with IT and Legal to embed strong cybersecurity controls across the organization.

Qualifikationen

• Bachelor degree in Computer Science, IT, Computer Engineering or equivalent.
• Certifications such as CISA, CGEIT, ISO 27001/27701 Lead Auditor, CRISC, CISSP are preferred.
• Knowledge of GDPR, PDPA and other privacy regulations.
• Knowledge of IT security, incident management, encryption, and DLP.

Aufgaben

• Define and oversee information security policies, standards, and controls to safeguard assets.
• Ensure ISMS in line with ISO/IEC 27001 and drive improvements.
• Conduct risk assessments and implement mitigation across units.
• Define and oversee Data Management policies and controls for Gamuda data, and implement PIMS per ISO/IEC 27701.
• Drive compliance with global privacy laws (GDPR, PDPA) and ensure data subject rights.
• Oversee data inventory, flow mapping, and PIAs/DPIAs; assist DPO on data matters.
• Liaise with regulators, auditors, and external stakeholders on data and cybersecurity matters.
• Promote a culture of security and privacy through training and awareness.

Kenntnisse

ISO 27001

ISO 27701

GDPR compliance

PDPA compliance

Data governance

ISMS management

Risk assessment

Regulatory liaison

Audits

Cybersecurity

Ausbildung

Bachelor's degree in IT/CS/Engineering

Jobbeschreibung

Gamuda Berhad is seeking a Senior Executive to lead data governance and information security programs. The role ensures ISO 27001 ISMS implementation, privacy framework deployment, and cross‑functional alignment with regulatory expectations.

The candidate will manage risk assessments, data lifecycle protections, and regulatory audits while partnering with IT and Legal to embed strong cybersecurity controls across the organization.