Tech Risk & Controls Leader | Cyber Governance

Ambition; Kuala Lumpur; Presencial; MYR 180.000 - 300.000; Jornada completa

Descripción de la vacante

Ambition seeks a hands-on technology and cyber risk professional to own risk governance and control at a leading Malaysian financial institution. You will engage regulators, senior management and Group stakeholders to shape the organisation's risk posture as cloud adoption expands.

The role sits in the second line of defence for technology and cyber risk, with direct visibility to Group Office. You will implement metrics, policies and remediation programs to strengthen resilience.

Formación

• 8–10+ years in cyber security, technology risk or IT governance in banking/insurance.
• Minimum 5 years in cyber/technology governance, risk and compliance.
• Familiar with Malaysian financial regulator guidelines.
• Broad exposure across cloud, IT ops, IAM and vulnerability management.
• Analytical, metrics-driven and able to drive issues to resolution.
• Ability to influence technology, security and business leaders.

Responsabilidades

• Strengthen cyber and technology risk framework across IT, security and operations.
• Lead risk and control self-assessments for infra, apps, cloud and access management.
• Act as primary contact for technology audits, cyber assurance reviews and inspections.
• Evaluate risk across vendors, outsourcing and partner ecosystems; handle due diligence.
• Design and report metrics to show management the risk posture.
• Maintain cyber and IT policies, standards, procedures; promote risk-aware culture.

Conocimientos

Governance & risk

Engagement with regulators

Stakeholder management

Analytical mindset

Educación

Degree in IT/CS/Cyber Security/Engineering

Descripción del empleo

Ambition seeks a hands-on technology and cyber risk professional to own risk governance and control at a leading Malaysian financial institution. You will engage regulators, senior management and Group stakeholders to shape the organisation's risk posture as cloud adoption expands.

The role sits in the second line of defence for technology and cyber risk, with direct visibility to Group Office. You will implement metrics, policies and remediation programs to strengthen resilience.