Snr IT Security Spclst

RHB Group; Selangor; On-site; MYR 180,000 - 260,000; Full time

Job summary

RHB Banking Group is a leading regional financial services provider headquartered in Malaysia seeking an IT Security Governance professional. This role mentors a team of IT Security Specialists and assists the section head to define and maintain the security advisory and risk assessment framework aligned with our cybersecurity strategy.

The position emphasizes risk management, project security reviews, vendor security, and governance/compliance, embedding security-by-design across initiatives

Responsibilities

• Oversee enterprise and project-level security risk assessments, ensuring all critical systems, projects and changes are evaluated.
• Establish a standardized process for identifying, classifying, and mitigating IT and cyber security risks.
• Maintain the security risk register and ensure tracking and closure of mitigation plans.
• Report significant risks and mitigation progress to senior management and governance committees.
• To align and execute IT security risk assessment according to Group Risk IT risk assessment methodology
• Lead security assessments for new IT and digital transformation projects, ensuring compliance with policies and guideline
• Review solution designs and architectures to identify potential vulnerabilities or control gaps.
• Provide formal risk acceptance or go-live recommendations and documented in NFR
• Integrate “security-by-design” principles into project lifecycle processes.
• Oversee security reviews for RFPs, vendor solutions, and third-party engagements.
• Ensure security requirements are clearly defined in RFPs and vendor contracts.
• Coordinate and review third-party risk assessments and recommend mitigation actions.
• Monitor performance, completeness and effectiveness of all managed security tools and controls.
• Implement automation and process improvement to reduce operational overhead
• Define KPIs and SLAs for tool uptime, incident response and compliance posture.
• Ensure all security controls meet internal and external regulatory requirements.
• Own the documentation of policies, procedures, operation manual and security standards related to managed systems
• Lead internal and external audits for the security technologies under this section.
• Drive remediation plans for audit findings and ensure timely closure.

Job description

• Mentor a team of IT Security Specialist
• Assist section head to define and maintain the security advisory and risk assessment framework aligned with corporate cybersecurity strategy.

Risk Assessment and Governance

• Oversee enterprise and project-level security risk assessments, ensuring all critical systems, projects and changes are evaluated.
• Establish a standardized process for identifying, classifying, and mitigating IT and cyber security risks.
• Maintain the security risk register and ensure tracking and closure of mitigation plans.
• Report significant risks and mitigation progress to senior management and governance committees.
• To align and execute IT security risk assessment according to Group Risk IT risk assessment methodology

Project Security Review

• Lead security assessments for new IT and digital transformation projects, ensuring compliance with policies and guideline
• Review solution designs and architectures to identify potential vulnerabilities or control gaps.
• Provide formal risk acceptance or go-live recommendations and documented in NFR
• Integrate “security-by-design” principles into project lifecycle processes.

RFP and Vendor Security Evaluation

• Oversee security reviews for RFPs, vendor solutions, and third-party engagements.
• Ensure security requirements are clearly defined in RFPs and vendor contracts.
• Coordinate and review third-party risk assessments and recommend mitigation actions.

Operational Excellence

• Monitor performance, completeness and effectiveness of all managed security tools and controls.
• Implement automation and process improvement to reduce operational overhead
• Define KPIs and SLAs for tool uptime, incident response and compliance posture.

Governance, Risk, and Compliance

• Ensure all security controls meet internal and external regulatory requirements.
• Own the documentation of policies, procedures, operation manual and security standards related to managed systems
• Lead internal and external audits for the security technologies under this section.
• Drive remediation plans for audit findings and ensure timely closure.

RHB Banking Group is a leading regional financial services provider headquartered and listed in Malaysia. Established in 1913, we offer comprehensive banking solutions across retail, business, corporate, and Islamic banking. With a strong presence in Malaysia and nine ASEAN countries, we are committed to delivering simple, fast, and seamless experiences. Guided by our brand promise, “Together We Progress,” we continue building a sustainable and inclusive future with our customers and stakeholders.

RHB Banking Group is a leading regional financial services provider headquartered and listed in Malaysia. Established in 1913, we offer comprehensive banking solutions across retail, business, corporate, and Islamic banking. With a strong presence in Malaysia and nine ASEAN countries, we are committed to delivering simple, fast, and seamless experiences. Guided by our brand promise, “Together We Progress,” we continue building a sustainable and inclusive future with our customers and stakeholders.

Researching careers? Find all the information and tips you need on career advice.