Senior Executive, IT Risk & Governance

Safeguards Secure Solution Sdn Bhd; Petaling Jaya; Vor Ort; MYR 120.000 - 180.000; Vollzeit

Zusammenfassung

Safeguards Secure Solution Sdn Bhd is seeking a driven Senior Executive, IT Risk & Governance to lead the IT Compliance function. You will establish and maintain our GRC framework to ensure regulatory alignment for technology initiatives, information security, and IT operations.

The role requires strong analytical skills, experience in financial services or regulated industries, and familiarity with BNM RMiT, COBIT, and ISO/IEC 27001.

Qualifikationen

• Bachelor’s Degree in IT, Computer Science, Information Security, Risk Management or related field.
• Minimum 5 years in IT Governance, IT Risk Management, Information Security, IT Audit or Compliance.
• Certifications such as CISA, CRISC, CGEIT, ISO/IEC 27001, CISSP preferred.
• Knowledge of BNM RMiT, COBIT, ISO/IEC 27001, NIST, ITIL.
• Strong analytical, communication, stakeholder management, and ability to work independently under pressure.

Aufgaben

• Regulatory Compliance: Support the GRC framework and monitor compliance with standards (BNM RMiT, PayNet, PDPA).
• IT Risk Management: Maintain enterprise IT risk registers, coordinate risk assessments, track remediation milestones.
• Policies & Standards: Develop, review, and update internal IT governance, data privacy and information security policies.
• IT Audits & Remediation: Facilitate audits, regulatory assessments, and due diligence; close audit findings.
• Vendor & Third-Party Risk: Monitor third-party IT risks and due diligence questionnaires.
• Governance Reporting: Prepare KPIs, KRIs, dashboards, and management reports on risk exposures and audit results.

Kenntnisse

Analytical thinking

Problem-solving

Communication

Stakeholder management

Work under pressure

Ausbildung

Bachelor’s Degree in IT/CS/Security/Risk Management

Jobbeschreibung

We are looking for a driven Senior Executive, IT Risk & Governance to join our IT Compliance team. You will play a key role in establishing and maintaining our IT governance, risk management, and compliance (GRC) framework. Your work will ensure that our technology initiatives, information security practices, and IT operations comply with regulatory standards (such as BNM RMiT and PDPA) while supporting our overall business goals.

Key Responsibilities

Regulatory Compliance: Support the GRC framework, monitor compliance with regulatory standards (BNM RMiT, PayNet, PDPA), and manage compliance registers, calendars, and audit schedules.

IT Risk Management: Maintain enterprise IT risk registers, coordinate periodic risk assessments, track remediation milestones, and elevate risks to the Head of IT Compliance.

Policies & Standards: Coordinate the development, review, and updating of internal IT governance, data privacy, and information security policies.

IT Audits & Remediation: Facilitate internal/external IT audits, regulatory assessments, and customer due diligence exercises; track and close audit findings.

Vendor & Third-Party Risk: Monitor third-party IT risks, cloud/outsourcing governance, and assist with bank/customer IT due diligence questionnaires.

Governance Reporting: Prepare compliance KPIs, KRIs, dashboards, and periodic management reports on risk exposures and audit findings.

Requirements & Qualifications

Education: Bachelor’s Degree in Information Technology, Computer Science, Information Security, Risk Management, or a related field.

Experience: Minimum 5 years of experience in IT Governance, IT Risk Management, Information Security, IT Audit, or Compliance. Experience in financial services or regulated industries is a strong advantage.

Certifications (Preferred): Professional certifications such as CISA, CRISC, CGEIT, ISO/IEC 27001, CISSP, or equivalent.

Knowledge Base: Familiarity with governance frameworks like BNM RMiT, COBIT, ISO/IEC 27001, NIST, or ITIL.

Soft Skills: Strong analytical and problem-solving skills, excellent communication and stakeholder management, and the ability to work independently under pressure.