Senior Manager, Technology Risk Management & Control

Ambition; Kuala Lumpur; Vor Ort; MYR 180.000 - 300.000; Vollzeit

Zusammenfassung

Ambition seeks a hands-on technology and cyber risk professional to own risk governance and control at a leading Malaysian financial institution. You will engage regulators, senior management and Group stakeholders to shape the organisation's risk posture as cloud adoption expands.

The role sits in the second line of defence for technology and cyber risk, with direct visibility to Group Office. You will implement metrics, policies and remediation programs to strengthen resilience.

Qualifikationen

• 8–10+ years in cyber security, technology risk or IT governance in banking/insurance.
• Minimum 5 years in cyber/technology governance, risk and compliance.
• Familiar with Malaysian financial regulator guidelines.
• Broad exposure across cloud, IT ops, IAM and vulnerability management.
• Analytical, metrics-driven and able to drive issues to resolution.
• Ability to influence technology, security and business leaders.

Aufgaben

• Strengthen cyber and technology risk framework across IT, security and operations.
• Lead risk and control self-assessments for infra, apps, cloud and access management.
• Act as primary contact for technology audits, cyber assurance reviews and inspections.
• Evaluate risk across vendors, outsourcing and partner ecosystems; handle due diligence.
• Design and report metrics to show management the risk posture.
• Maintain cyber and IT policies, standards, procedures; promote risk-aware culture.

Kenntnisse

Governance & risk

Engagement with regulators

Stakeholder management

Analytical mindset

Ausbildung

Degree in IT/CS/Cyber Security/Engineering

Jobbeschreibung

This is a strong opportunity for a hands-on technology and cyber risk professional to own risk governance & control at one of Malaysia's leading financial institution. It suits someone who combines deep technical knowledge with the confidence to engage regulators, senior management and Group stakeholders.

Why Apply?

Our client is a leading Financial Institution with operations across Asia-Pacific. This role sits at the heart of the second line of defence for technology and cyber risk, with direct visibility to senior management and Group Office. You will have a real voice in shaping the organisation's technology risk posture as it scales cloud adoption and digital capabilities.

The Role

You will strengthen the cyber and technology risk framework, working across IT, security, operations and business risk teams. Key responsibilities include:

• Benchmarking cyber and technology controls against current and emerging regulatory requirements, and driving remediation to closure
• Leading risk and control self-assessments across infrastructure, applications, cloud, access management and cyber defence
• Acting as the central point of contact for technology audits, cyber assurance reviews and regulatory inspections
• Evaluating cyber and technology risk across vendors, outsourcing arrangements and partner ecosystems, and handling due diligence requests
• Designing and reporting technology risk and cyber security metrics that give management a clear picture of the organisation's risk posture
• Maintaining cyber and IT policies, standards and procedures, and promoting a strong risk-aware culture

What We're Looking For

We want a well-rounded governance professional who is equally comfortable discussing cyber threats and technology operations with stakeholders. You'll bring:

• 8-10+ years across cyber security, technology risk or IT governance, ideally within banking or insurance
• At least 5 years in a dedicated cyber or technology governance, risk and compliance role
• Strong familiarity with cyber and technology risk guidelines issued by Malaysian financial regulators
• Broad exposure across technology and security domains, including cloud, IT operations, identity and access, and vulnerability management
• An analytical, metrics-driven approach, with the discipline to see issues through to resolution
• The ability to influence and negotiate with technology, security and business leaders
• A degree in IT, Computer Science, Cyber Security or Engineering. CISA, CISSP, CISM or CRISC is highly regarded

Ready to lead cyber and technology risk governance at a top financial institution?

JTK Number: JTKSM 995 | Company Registration Number: 201301019088 (1048918-T)