Strategic CISO: Tech Risk & Compliance Lead

Doit

Petaling Jaya

Hybrid

MYR 300,000 - 520,000

Full time

6 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

doit Holdings is seeking a CISO who will own information security and technology risk for its regulated investment platform in Malaysia. You will lead the development of risk frameworks, policies, and controls, and oversee security operations including monitoring, vulnerability management, and incident response.

The role requires 8+ years in information security with 5+ in financial services, CISSP/CISM/CISA, and ISO/IEC 27001 implementation expertise.

Qualifications

Requires deep information security background with 8+ years in the field, 5+ in a regulated sector.
CISSP, CISM or CISA certifications required.
Strong understanding of the SC Guidelines on Technology Risk Management.
Experience in cyber security, resilience, cloud and third-party risk.
ISO/IEC 27001 implementation through to certification.
Degree in CS/IT or equivalent.

Responsibilities

Oversee day-to-day technology risk and deliver the board's cyber security strategy.
Develop and maintain technology risk, cyber security frameworks, policies and risk appetite.
Run security operations including monitoring, vulnerabilities, patch management, access control and data protection.
Own incident response from detection to recovery and reporting to the SC.
Lead the platform through independent technology validation for registration.
Drive ISO/IEC 27001 scoping to certification.
Deliver annual cyber security awareness across management and staff.