Specialist, Data Protection Risk & Compliance

Averis; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Averis in Kuala Lumpur, Malaysia, is seeking a Specialist, Data Protection, Risk & Compliance to join our Data Governance function. This role leads operational governance, information protection, compliance monitoring, and risk management across the organization.

The successful candidate will collaborate with business, technology, and governance teams to ensure information protection controls remain effective, and governance requirements are consistently implemented.

Qualifications

• Degree and 2–5 years in information governance, data protection, or IT compliance.
• Experience with security operations and risk management.
• Strong understanding of governance, policy, and regulatory obligations.

Responsibilities

• Lead operational activities for information protection, governance monitoring, and risk management.
• Review incidents, control exceptions, and compliance findings with remediation follow-ups.
• Support risk assessment across business processes and technology platforms.
• Coordinate escalation and reporting of significant operational risk matters.

Skills

Information Governance

Data Protection

IT Compliance

Security Operations

Education

Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Business Information Management, or a related discipline

Tools

Proofpoint

Symantec DLP

Microsoft Purview

Power BI

Power Query

Power Automate

Job description

We are seeking a highly motivated Specialist, Data Protection, Risk & Compliance to join our Data Governance function.

This role is responsible for leading operational governance, information protection, compliance monitoring, and risk management activities across the organization. The successful candidate will work closely with business, technology, and governance teams to ensure information protection controls remain effective, operational risks are appropriately managed, and governance requirements are consistently implemented.

The role combines operational leadership, stakeholder management, information protection expertise, and compliance oversight, making it ideal for candidates with experience in technology risk, data protection, governance, cybersecurity operations, or compliance management.

Key Responsibilities

• Lead operational activities supporting information protection, governance monitoring, and risk management programmes.
• Review operational incidents, control exceptions, and compliance findings, ensuring appropriate remediation and follow-up actions.
• Support the assessment and management of information-related risks across business processes and technology platforms.
• Coordinate escalation and reporting of significant operational risk matters.

Governance & Compliance

• Ensure operational activities align with internal governance requirements, policies, standards, and regulatory obligations.
• Support governance reviews, compliance assessments, and control effectiveness evaluations.
• Coordinate periodic compliance reporting and management reviews.
• Support the implementation and continuous improvement of governance processes and controls.

Information Protection Technologies

• Provide operational oversight and governance support for enterprise information protection technologies.
• Partner with platform teams to ensure protection controls remain effective and aligned with business requirements.
• Review and recommend improvements to protection policies, monitoring capabilities, and operational processes.
• Support technology enhancement, migration, and transformation initiatives related to information protection and governance.

Preferred Areas of Exposure

• Email Security Controls
• Information Classification Solutions
• Develop and present governance, compliance, and operational risk reports for management review.
• Analyse trends, recurring issues, and operational metrics to support decision-making.
• Support governance forums through meaningful reporting, insights, and recommendations.
• Work with stakeholders to improve reporting quality, visibility, and governance outcomes.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Business Information Management, or a related discipline.
• 2–5 years of relevant experience in one or more of the following areas:
• Information Governance
• Data ProtectionIT Compliance
• Security Operations

Preferred Skills

• Experience with information protection technologies such as Proofpoint, Symantec DLP, Microsoft Purview, or similar solutions.
• Familiarity with information governance, records management, information lifecycle management, and enterprise compliance frameworks.
• Experience with Power BI, Power Query, Power Automate, or other reporting and automation tools.
• Understanding of information classification, data protection, and governance concepts.
• Strong analytical, problem-solving, and communication skills.