Senior IT Security & Risk Leader (GRC, Cloud, IR)

Alphv Recruit; Kuala Selangor; On-site; MYR 180,000 - 260,000; Full time

Job summary

Alphv Recruit in Malaysia seeks a Senior IT Manager with 5-8+ years in IT risk, governance and cybersecurity within financial services. The role is based on-site in Bangsar South and offers cross-border exposure, working with regional teams on regulatory compliance and technology risk across markets.

You will lead cloud governance, MFA, PAM and EDR controls, incident response, and regulatory reporting, while supporting IT strategy and infrastructure initiatives with the Head of IT.

Qualifications

• 5–8+ years in IT risk, governance, cybersecurity, infrastructure or IT operations in financial services.
• Knowledge of SC GTRM, BNM RMiT and Bursa Malaysia IT requirements.
• Experience managing technology risk, regulatory compliance, incidents and infrastructure.
• Strong stakeholder management across business, technology and regional teams.
• CISA / CRISC preferred.
• Mandarin/Chinese communication skills required.

Responsibilities

• Lead compliance with SC GTRM, Bursa Malaysia IT requirements and other regulatory frameworks.
• Govern cloud adoption per Bursa ICON-Cloud and Shared Responsibility Models.
• Oversee cybersecurity controls including MFA, PAM, EDR, patching and security monitoring.
• Lead Incident Response and ensure regulatory reporting and recovery readiness.
• Support Head of IT in country-level IT strategy, infrastructure operations, and technology initiatives.

Skills

IT Risk

Governance

Cybersecurity

Infrastructure

IT Operations

Regulatory compliance

Stakeholder management

CISA

CRISC

Mandarin

Job description

Alphv Recruit in Malaysia seeks a Senior IT Manager with 5-8+ years in IT risk, governance and cybersecurity within financial services. The role is based on-site in Bangsar South and offers cross-border exposure, working with regional teams on regulatory compliance and technology risk across markets.

You will lead cloud governance, MFA, PAM and EDR controls, incident response, and regulatory reporting, while supporting IT strategy and infrastructure initiatives with the Head of IT.