Specialist, IT Governance & Compliance

U Mobile; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Benefits offered by this job

Comprehensive medical, dental, optical

Insurance benefits

Flexi working hours

Staff device subsidy

Smart casual attire

Parental leave

Public transport access

Employee discounts

Job summary

U Mobile is seeking an experienced IT governance, risk, and compliance lead to drive controls and regulatory alignment across the organisation in Kuala Lumpur.

You will develop policies, oversee audits, manage third-party risk, and partner with stakeholders to embed IT controls into business processes while staying current with GDPR, PDPA, ISO 27001, NIST, and PCI-DSS.

Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
• At least 7 years of experience in IT governance, risk management, or compliance.
• Strong knowledge of IT governance frameworks and regulatory standards.
• Professional certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Familiarity with cloud compliance (AWS, Azure, or GCP); PMP certification is an advantage.
• Strong communication, leadership, and stakeholder management skills.

Responsibilities

• Develop, implement, and maintain IT governance frameworks, policies, and procedures.
• Lead IT risk assessments and audits, identify control gaps, and oversee remediation actions.
• Work with internal stakeholders to embed IT controls into business processes and support incident response and business continuity planning.
• Monitor compliance metrics and risk indicators, and provide regular reports to senior management.
• Manage third-party risk assessments and vendor compliance reviews while staying updated on regulatory changes and emerging IT risks.

Skills

IT governance

Risk management

Regulatory compliance

GRC platforms

Stakeholder management

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

GRC platforms

Policy management tools

Job description

Life at U MobileWe are Passionate, Innovative, Trustworthy, Team-Oriented & Fun-Loving.

Life at U MobileWe are Passionate, Innovative, Trustworthy, Team-Oriented & Fun-Loving. At U Mobile, we are always on the lookout for great talents and passionate individuals to join our growing team. Let’s start your journey with an award-winning organization! #UnbeatableCareerAwaits

Top Reasons To Join Us!

• Awarded For
• Most Preferred Employers in Telecommunication Industry (2022, 2023 & 2024)
• Bronze Winner in Cross-Generational Workforce Engagement (2024)
• Gold Winner for Excellence in Workplace Culture (2021)
• Comprehensive medical, dental, optical and insurance benefits
• Flexi working hours arrangements
• Staff Line & Device Subsidy
• Smart Casual Attire
• Child Parental Care Leave
• Convenient location with access to public transport (Imbi Monorail/Bukit Bintang MRT)
• Special employee discounts for selected F&B Brands

Job SummaryLead IT governance, risk, and compliance initiatives to ensure effective controls, regulatory compliance, risk management, and alignment with industry standards across the organisation.

The Day-to-Day Activities

• Develop, implement, and maintain IT governance frameworks, policies, and procedures.
• Ensure compliance with internal policies, regulatory requirements, and relevant industry standards, including GDPR, PDPA, ISO 27001, NIST, and PCI-DSS.
• Lead IT risk assessments and audits, identify control gaps, and oversee remediation actions.
• Work with internal stakeholders to embed IT controls into business processes and support incident response and business continuity planning.
• Monitor compliance metrics and risk indicators, and provide regular reports to senior management.
• Manage third-party risk assessments and vendor compliance reviews while staying updated on regulatory changes and emerging IT risks.

About You

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• At least 7 years of experience in IT governance, risk management, or compliance, preferably within a regulated industry.
• Strong knowledge of IT governance frameworks, regulatory standards, audit processes, and GRC platforms.
• Professional certification such as CISA, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Familiarity with cloud compliance across AWS, Azure, or GCP; project management experience or PMP certification is an advantage.
• Strong communication, leadership, and stakeholder management skills.

Spoken Language: Malay, English

Written Language: Malay, English

What’s Next ?Once you have applied online, our team will review your application and due to a high volume of applications, only shortlisted candidates will be notified.