Tech Risk & Controls Lead – Cybersecurity & Compliance

Aumni

Malaysia

On-site

MYR 180,000 - 300,000

Full time

6 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

J.P. Morgan in Malaysia seeks a Tech Risk & Controls Lead to identify and mitigate technology risks, ensuring regulatory compliance and operational integrity. You will guide process owners and regulators, shaping the firm’s risk posture and strategic responses.

You will lead cross-functional teams, drive innovative AI-enabled risk solutions, and report to senior management on control effectiveness while maintaining data security and auditability in a dynamic risk landscape.

Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or related field.
5+ years of technology risk management, information security, or related experience.
Familiarity with risk management frameworks, industry standards, and financial regulatory requirements.
Proficient knowledge in data security, risk assessment and reporting, control evaluation and governance.
Demonstrated ability to influence executive-level strategic decisions and translate tech insights into business strategy.
Experience using enterprise-approved AI capabilities to support risk/workflows with validation and data sensitivity awareness.
Ability to review and validate AI-assisted risk summaries before use and ensure auditability.

Responsibilities

Identify, quantify, communicate, and manage technology risk with root-cause analysis and remediation recommendations.
Build robust relationships with LOB technologists, assessment teams, and data officers for cross-functional collaboration.
Govern controls, policies, issue management, and measurements to inform senior management on control effectiveness.
Utilize AI capabilities to accelerate evidence synthesis and draft executive-ready reports while handling data securely.
Monitor KRIs, KPIs, and control effectiveness; identify gaps and recommend enhancements.
Act as main contact with Regulator on Technology/Cyber Risk and manage entity-specific risks and incident responses.
Stay apprised of current and emerging tech risks affecting the financial institution’s risk profile.
Inform Location Board/LOC/IT sub-committee about cyber security risk exposures.
Coordinate Malaysia Regulator Reporting for Cyber Incident and liaise with Cyber Security Operations Center.
Ensure timely completion and submission of regulatory assessments.
Promote reuse-first, AI-assisted approaches to streamline control testing and action plans.