Senior Information Security & Cyber Risk Leader

AEON Credit Service (M) Bhd; Kuala Lumpur; On-site; MYR 90,000 - 130,000; Full time

Job summary

AEON Credit Service (M) Berhad is seeking a Technology Risk Manager to oversee current and emerging technology risk, cyber risk and data protection across the ACSM’s risk profile. You will ensure information assets and technologies are adequately protected and report on technology risk including security breaches and regulatory requirements.

You will facilitate independent technology risk assessments, coordinate cyber risk management activities, stay current with security best practices, oversee

Responsibilities

• Oversee technology risk management for ACSM, including cyber risk and data protection.
• Identify and report on technology risks and security breaches, initiating corrective actions.
• Coordinate independent technology risk assessments, including third-party providers.
• Act as liaison in cyber risk management activities (identification, prevention, detection, recovery).
• Stay updated on cyber security practices, incidents, and emerging threats.
• Oversee incident response planning and investigation of breaches, assisting with disciplinary matters as needed.
• Develop and implement controls to mitigate identified threats and risks.
• Assemble cyber risk scenarios and estimate likelihood and impact on objectives.
• Participate in IT projects to promote proactive risk management.
• Provide guidance in technology risk development and enforcement of IT security standards.
• Communicate assessment results to appropriate parties and ensure corrective actions are addressed.
• Conduct ACSM cyber risk awareness initiatives.
• Carry out ad-hoc assignments from CRO/Management/Board.

Job description

AEON Credit Service (M) Berhad is seeking a Technology Risk Manager to oversee current and emerging technology risk, cyber risk and data protection across the ACSM’s risk profile. You will ensure information assets and technologies are adequately protected and report on technology risk including security breaches and regulatory requirements.

You will facilitate independent technology risk assessments, coordinate cyber risk management activities, stay current with security best practices, oversee