Team Lead, IT Governance

TNG Digital Sdn Bhd; Kuala Lumpur; On-site; MYR 90,000 - 170,000; Full time

Job summary

TNG Digital Sdn Bhd in Kuala Lumpur seeks a Team Lead for IT Governance to own and coordinate internal, external, and regulatory audits across the Tech Division, including PCI-DSS validation. You will track audit observations and ensure comprehensive documentation, maintaining readiness throughout the year.

The role requires 7+ years in IT governance, strong knowledge of BNM RMiT, PCI-DSS, and ISO/IEC 27001, and experience guiding DevSecOps and secure SDLC practices.

Qualifications

• Bachelor’s degree in IT, cybersecurity or related field.
• 7+ years in IT governance, audit and compliance in regulated environments.
• Deep knowledge of BNM RMiT, PCI-DSS, ISO/IEC 27001.
• Experience leading technical teams in implementing compliance controls.
• Familiarity with SDLC tools such as Git, Jenkins, Azure DevOps, and code security scanning.

Responsibilities

• Full ownership and coordination of internal, external, and regulatory IT audits across the Tech Division including yearly PCI-DSS validation.
• Track and ensure closure of all audit observations with strong documentation and root cause analysis.
• Maintain a comprehensive register of all audit activities and ensure year-round readiness.
• Ensure timely completion of all audit-related deliverables, including DR, BCP, and ad hoc assessments.
• Drive and execute the company-wide Cybersecurity Awareness Program with awareness content and phishing simulations.
• Collaborate with DevOps teams to ensure secure and compliant deployment practices.
• Lead initiatives to automate and restructure processes with a focus on compliance, visibility, and efficiency.

Skills

IT Governance

Audit & Compliance

Regulatory Knowledge

Risk Management

SDLC & DevSecOps

Education

Bachelor’s degree in IT or Cybersecurity

Tools

Git

Jenkins

Azure DevOps

Code security scanning

Job description

# Team Lead, *IT Governance*Kuala Lumpur, MalaysiaPermanent#### Duties & Responsibilities* Full ownership and coordination of internal, external, and regulatory IT audits across the Tech Division including yearly PCI-DSS validation.* Track and ensure closure of all audit observations, with strong documentation and root cause analysis.* Maintain a comprehensive register of all audit activities and ensure year-round readiness.* Ensure timely completion of all audit-related deliverables, including DR, BCP, and ad hoc assessments.* Deep familiarity with BNM RMiT and related guidelines, ensuring the organization is always aligned with evolving expectations.* Identify and reduce repeat findings through robust root-cause fixes and preventive controls.* Collaborate with all department within Tech division to identify inefficiencies or non-compliance in current processes.* Lead initiatives to automate and restructure processes with a focus on compliance, visibility, and efficiency.* Ensure changes are tracked, documented, and adopted into BAU.* Continuously evaluate the effectiveness of IT risk management in identifying, evaluating, and mitigating risks.* Drive successful gap analysis results across all audits and assessments.* Ensure proper execution of Business Impact Analysis (BIA) and risk registers.* Track and follow up on MSII risk items under Tech division.* Ensure every risk or process gap is clearly mapped and remediated within set timelines.* Drive and execute the company-wide Cybersecurity Awareness Program, including Posters, broadcasts (Lark/email), awareness videos, Newsletters, interactive content (quizzes, games)* phishing simulation in collaboration with IRM* Monitor and improve awareness levels based on feedback and participation metrics.* Possess solid understanding of SDLC and secure development lifecycle practices.* Familiar with CI/CD pipelines, version control practices (e.g., Git), and DevSecOps controls.* Capable of reviewing and governing source code scanning tools (e.g., SAST/DAST) to ensure early vulnerability detection.* Able to engage effectively with engineering teams to understand development workflow, identify governance gaps, and propose security/process checkpoints.* Work closely with DevOps teams to ensure secure and compliant deployment practices.#### Requirements* Bachelor’s degree in Information Technology, Cybersecurity, or a related field.* Minimum 7 years of experience in IT Governance, Audit, and Compliance roles, preferably in regulated environments (e.g., fintech, banking, insurance).* In-depth knowledge of BNM RMiT, PCI-DSS, ISO/IEC 27001, and other relevant frameworks.* Strong familiarity with audit cycles, tracking tools, audit documentation, and end-to-end compliance lifecycle.* Experience leading or supporting technical teams in implementing compliance controls and tools.* Understanding of IT systems, infrastructure, development practices, and process documentation.* Strong interpersonal skills to engage with all levels of stakeholders, including regulators, auditors, and senior leadership.* Preferred certifications: CISA, ISO 27001 Lead Auditor, CRISC, CGEIT, or similar.* Familiarity with SDLC tools such as Git, Jenkins, Azure DevOps, and code security scanning platforms is a strong plus.