Senior, IT & Cyber Security Controls

GX Bank Berhad; Petaling Jaya; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading digital bank in Malaysia is seeking a Senior IT & Cyber Security Controls professional to manage compliance frameworks, assess internal controls, and prepare reports on technology risks. The ideal candidate has at least 5 years of experience in IT audit or risk management and a solid understanding of cyber security frameworks. This role is full-time and based in Petaling Jaya.

Qualifications

• At least 5 years of experience in risk management, IT audit, information security or IT compliance.
• Knowledge of cloud environments or prior experience with public cloud services.
• Advanced understanding of cyber security frameworks and practices.
• Understanding of risk management methodology and frameworks.
• Knowledge of regulatory requirements.

Responsibilities

• Assist in managing frameworks and policies for compliance.
• Assess effectiveness of internal controls and propose remediation actions.
• Prepare periodic reports on technology risk & security control activities.
• Provide support during internal and external audits.
• Coordinate security awareness-related activities.
• Execute and deliver on agreed-upon KPIs.

Skills

Risk management

IT audit

Information security

IT compliance

Cloud services

Cyber security trends

Job description

Senior, IT & Cyber Security Controls page is loaded

Senior, IT & Cyber Security Controls

Apply locations Petaling Jaya (First Avenue) time type Full time posted on Posted Yesterday job requisition id R-2025-07-101592

Get to know our Company:

GX Bank Berhad - the Grab-led Digital Bank - is the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises.

We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that address the financial struggles of Malaysians and businesses.

Get to know the Role:

• Framework and Policy Management: Assist in the management of relevant frameworks and policies to ensure strict compliance with both regulatory requirements and internal standards.

• Risk and Control Management: Actively assess the effectiveness of internal controls and propose practical remediation actions as needed. You will track and monitor the implementation of all risk mitigation measures to ensure full closure.

• Audit and Reporting: Prepare and compile clear, periodic reports and updates on technology risk & security control activities for management. You will analyse results from self-assessments and internal/external audits to help formulate effective remedial solutions.

• Regulatory Liaison: Provide support and assistance during internal and external audits, as well as regulatory examinations and inspections.

• Security and Awareness: Coordinate and support all security awareness-related activities, including campaigns, roadshows, trainings, and simulations, to embed a strong risk culture throughout the organization.

• KPI Delivery: Execute and deliver on agreed-upon Key Performance Indicators (KPIs) related to the role and responsibilities.

The Must Haves:

• At least 5 years of experience, preferably in risk management, IT audit, information security or IT compliance.

• Knowledge of cloud environments or prior experience working with public cloud services (eg. AWS)

• Self-starter with the interest and ability to research and improve on new technologies knowledge and cyber security trends.

• Advanced understanding of:

• i. Cyber security framework and practices, such as NIST CSF, ISO27001, OWASP

• ii. Risk management methodology and frameworks

• iii. Regulatory requirements such as RMiT, Cyber Security Act, PDPA

About Us

GX Bank Berhad (GXBank) is Malaysia’s first digital bank that commenced operation on 1 September 2023. With a workforce of more than 95% Malaysians from both the finance and technology sectors, the bank aims to disrupt the current banking industry with customised innovative solutions that empower Malaysians to be financially resilient and support their financial goals. Powered by Grab, GXBank is a subsidiary of GXS Bank Pte. Ltd., – the digital bank joint venture between Grab Holdings Limited and Singapore Telecommunications Limited (Singtel) – and a consortium of other Malaysian investors, including Kuok Group.