Tech Risk & Security Operations Manager

Touch 'n Go Group; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Unlimited pantry fruits, snacks &drin

Mobile and broadband subscription Reim

Hybrid work arrangement & flexi hours

Dependents coverage option (outpatient

Medical benefits including dental and视

Job summary

Touch 'n Go Group is seeking a seasoned Technology Risk Manager to own risk governance, audits, and remediation across IT and cyber domains. You will drive risk assessments, manage issue registries, and coordinate with regulators and internal stakeholders to ensure strong controls and timely remediation.

We offer a hybrid work model in Malaysia, with flexible hours and comprehensive benefits. A minimum of 5 years in technology risk or cyber governance is required, along with relevant

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, info systems, risk management or related field.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 Lead Auditor/Lead Implementer are highly desirable.
• Minimum 5 years of experience in Technology Risk Management, Cybersecurity Governance, IT Audit, IT Compliance, or information security.

Responsibilities

• Own and manage the centralized Technology & Cyber Risk Register, with accurate risk identification, assessment, documentation, monitoring and reporting.
• Lead risk assessments across IT infrastructure, cloud, apps, cybersecurity controls and operations.
• Define risk ratings, ownership, mitigation strategies, compensating controls, and acceptance records.
• Coordinate audits, regulatory assessments, and responses with internal and external stakeholders.
• Translate findings into remediation plans with clear accountability and timelines.
• Monitor remediation progress and validate closure of findings and controls.
• Collaborate across IT Operations, Security, vendors, and service providers for risk mitigation.

Skills

Stakeholder management

Communication skills

Analytical thinking

Coordination abilities

Problem solving

Governance awareness

Education

Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Risk Management

Tools

CISA

CISM

CRISC

CISSP

ISO 27001 Lead Auditor/Lead Implementer

Job description

Touch 'n Go Group is seeking a seasoned Technology Risk Manager to own risk governance, audits, and remediation across IT and cyber domains. You will drive risk assessments, manage issue registries, and coordinate with regulators and internal stakeholders to ensure strong controls and timely remediation.

We offer a hybrid work model in Malaysia, with flexible hours and comprehensive benefits. A minimum of 5 years in technology risk or cyber governance is required, along with relevant