Senior IT Risk & Compliance Leader

Great Eastern; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 200,000; Full time

Job summary

Great Eastern in Malaysia is seeking an IT Risk & Compliance professional to evaluate overall IT risk, maintain an active risk view, and report to Group IT management on a regular basis. You will implement the IT Compliance Programme, validate controls, monitor regulatory adherence, and drive remediation across GRM and RM&C.

The role requires a Bachelor's in IT/related field, 5+ years in technology risk or IT audit, and relevant certifications such as CISA/CISM/CRISC/CISSP.

Qualifications

• Bachelor's degree or higher in IT/related fields.
• 5+ years in technology risk, IT compliance, IT audit, or information security.
• Professional certifications such as CISA, CISM, CRISC, CISSP preferred.
• Knowledge of MAS TRM and RMiT requirements preferred.
• Experience in data analytics for risk & compliance.
• Insurance/financial services industry experience is advantageous.

Responsibilities

• Evaluate overall information technology risk and report to Group IT management.
• Implement and maintain the IT Compliance Programme to validate key IT controls.
• Monitor IT regulatory compliance and report gaps or breaches to management.
• Track changes in technology regulations and recommend remediation measures.
• Conduct compliance reviews of key IT processes and systems.
• Prepare compliance review reports and monitor remediation actions through to closure.
• Support consolidation and submission of Compliance Event Reporting to GRM and RM&C.
• Participate in technology risk assessments for AI, Cloud, and other technologies.
• Coordinate IT audit engagements and escalate overdue items.
• Promote IT risk awareness through awareness sessions and staff training.

Skills

Analytical

Stakeholder management

Communication

Data analytics

Problem solving

Risk awareness

Education

Bachelor's Degree in Information Technology or related

CISA, CISM, CRISC, CISSP

Job description

Great Eastern in Malaysia is seeking an IT Risk & Compliance professional to evaluate overall IT risk, maintain an active risk view, and report to Group IT management on a regular basis. You will implement the IT Compliance Programme, validate controls, monitor regulatory adherence, and drive remediation across GRM and RM&C.

The role requires a Bachelor's in IT/related field, 5+ years in technology risk or IT audit, and relevant certifications such as CISA/CISM/CRISC/CISSP.