Senior Third-Party Risk & Cybersecurity Lead

OCBC Group; Malaysia; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Learning & development opportunities

Community initiatives

Job summary

OCBC Malaysia seeks aRisk Management professional to lead risk-based due diligence for third-party service arrangements, focusing on technology, cybersecurity, and operational resilience. You will collaborate with internal teams and external providers to ensure regulatory compliance and effective risk controls.

The role requires hands-on review of vendor security documents, familiarity with international standards, and strong communication skills to present insights to management.

Qualifications

• Experience in Third-Party Risk Management (TPRM) and vendor due diligence.
• Strong ability to review vendor security questionnaires and ISO/SOC reports.
• Knowledge of information security, cloud governance, and data privacy laws.

Responsibilities

• Lead risk-based due diligence for third-party services with focus on technology and cybersecurity.
• Prepare risk reports, dashboards, and insights for stakeholders.
• Collaborate with policy owners and other assurance functions in the risk framework.
• Assess control gaps and advise on remediation timelines and effectiveness.

Skills

Analytical thinking

Risk judgement

Stakeholder management

Documentation discipline

Auditing interpretation

Education

Degree in Information Security or related field

CISSP/CISM/CISA/CRISC/CTPRP (preferred)

Tools

Microsoft365

Power Platform

PowerBI

Data workflows

TPRM platforms

Job description

OCBC Malaysia seeks aRisk Management professional to lead risk-based due diligence for third-party service arrangements, focusing on technology, cybersecurity, and operational resilience. You will collaborate with internal teams and external providers to ensure regulatory compliance and effective risk controls.

The role requires hands-on review of vendor security documents, familiarity with international standards, and strong communication skills to present insights to management.