Strategic IT Risk & Compliance Leader

Hiree; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Hiree in Kuala Lumpur is seeking an IT Risk and Compliance – Assistant Manager/Manager to oversee risk and compliance activities within the Group Technology Department. The role ensures proactive management of risk, with timely mitigation, controls, and management of compliance submissions.

You will collect data, perform risk assessments, coordinate KRIs/CSARs, and advise IT projects on adherence to policies and guidelines.

Qualifications

• Bachelor's degree in Business, IT, Risk Management, or related field or relevant certifications (e.g., CISA, CISSP, CRISC).
• More than 5 years of relevant experience in risk and compliance.
• Proven experience in governance, risk management, or compliance roles, preferably in financial institutions.
• Strong knowledge of regulatory frameworks, industry standards, and best practices related to GRC.
• Exceptional analytical skills and the ability to assess complex risks and provide practical solutions.
• Excellent communication and interpersonal skills to work effectively with cross-functional teams and external stakeholders.
• Detail-oriented with a commitment to maintaining the highest standards of integrity and ethics, strong organizational skills and the ability to prioritize and manage multiple tasks efficiently.

Responsibilities

• Collect information and review documentation to ensure that risk scenarios are identified and evaluated.
• Identify legal, regulatory and contractual requirements and organizational policies to determine impact on objectives.
• Perform monthly/quarterly submissions and annual reviews of KRIs, RCSA, CSAR, CMAX, CRMA, MCIPD.
• Coordinate monthly Technology Risk Dashboard submissions to Technology Risk Management team.
• Collect and validate data that measure KRIs for decision-making transparency.
• Facilitate independent risk assessments and risk management process reviews.
• Review departmental documentation and provide advisories to IT Project Managers.
• Timely reporting/escalation of compliance issues/breaches to BRCM and submission of Lost Event Reports.
• Close monitoring of BNMs reviews and PayNet queries to meet timelines.
• Undertake ad-hoc assignments as directed by Head, GRC.

Skills

Analytical skills

Communication

Risk management

GRC knowledge

Stakeholder engagement

Organizational skills

Attention to detail

Education

Bachelor's degree in Business/IT/Risk

CISA / CISSP / CRISC certification

Job description

Hiree in Kuala Lumpur is seeking an IT Risk and Compliance – Assistant Manager/Manager to oversee risk and compliance activities within the Group Technology Department. The role ensures proactive management of risk, with timely mitigation, controls, and management of compliance submissions.

You will collect data, perform risk assessments, coordinate KRIs/CSARs, and advise IT projects on adherence to policies and guidelines.