Tech Security Operations Lead - Risk & Audit (Hybrid)

Touch 'n Go Group; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work arrangement

Flexible hours

Unlimited pantry fruits, snacks anddr"

Job summary

Touch ‘n Go Group in Kuala Lumpur is seeking a Technology Risk Manager to own the centralized risk register, drive audits, and oversee IT/cyber remediation. You will coordinate with Internal/External Audit, regulators, and risk owners to ensure timely actions and evidence collection.

The role requires 5+ years in technology risk or related fields, strong analytical and communication skills, and a hybrid work arrangement. Benefits include medical coverage and flexible policies.

Qualifications

• Bachelor's degree or equivalent in IT, cybersecurity, or risk management.
• Professional certifications such as CISA, CISM, CRISC, CISSP, CGEIT or ISO 27001 Lead Auditor/Lead Implementer are desirable.
• Minimum 5 years in Technology Risk Management, Cybersecurity Governance, IT Audit, IT Compliance, or related fields.

Responsibilities

• Own centralized risk register across technology and cyber domains.
• Lead risk assessments for IT infrastructure, cloud, and security controls.
• Coordinate audits and regulatory assessments with multiple stakeholders.
• Translate findings into actionable remediation plans with owners.
• Monitor remediation progress and ensure timely closure.
• Prepare governance reports and dashboards for senior management.

Skills

Stakeholder management

Communication skills

Analytical thinking

Problem-solving

Coordination

Report writing

Presentation skills

Influence across teams

organizational skills

Education

Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Risk Management, or a related discipline

CISA

CISM

CRISC

CISSP

ISO 27001 Lead Auditor/Lead Implementer

Job description

Touch ‘n Go Group in Kuala Lumpur is seeking a Technology Risk Manager to own the centralized risk register, drive audits, and oversee IT/cyber remediation. You will coordinate with Internal/External Audit, regulators, and risk owners to ensure timely actions and evidence collection.

The role requires 5+ years in technology risk or related fields, strong analytical and communication skills, and a hybrid work arrangement. Benefits include medical coverage and flexible policies.