Technology Assurance Specialist

AFFIN Group; Kuala Lumpur; Vor Ort; MYR 120.000 - 180.000; Vollzeit

Zusammenfassung

AFFIN Group in Kuala Lumpur is seeking an experienced IT Risk & Compliance professional to drive governance, risk management, and regulatory compliance across technology functions. You will coordinate KRIs, control assessments, and documented submissions to management, collaborating with cross-functional teams.

The role requires 3+ years in risk/compliance in financial institutions, strong knowledge of GRC frameworks, and excellent communication skills to engage with stakeholders and regulators

Qualifikationen

• Bachelor's degree in business, IT, risk management or related field; relevant certs welcomed.
• 3+ years of risk and compliance experience in financial institutions.
• Knowledge of regulatory frameworks and GRC best practices.
• Excellent communication and collaboration skills.

Aufgaben

• Identify and evaluate risk scenarios and applicable laws and policies.
• Submit and review KRIs, RCAs, SSAR, CMAX, CRMA, and MCIPD reports.
• Coordinate monthly technology risk dashboard submissions.
• Collect and validate KRIs data for stakeholder decisions.
• Support independent risk assessments and process reviews.
• Escalate compliance issues to BRCM and document incidents in GCM.
• Monitor BNMs reviews and PayNet queries within timelines.
• Undertake ad-hoc IT risk/compliance assignments as directed.

Kenntnisse

Analytical skills

Communication

Attention to detail

Risk management

Ausbildung

Bachelor's degree in business, IT, risk management or related field

CISA

CISSP

CRISC

Tools

GRC tools

Jobbeschreibung

Create your future with Affin! You too can make a difference.

Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don’t just stay at the forefront of the industry – you can make a difference too.

Job Purpose

This role will evaluate and ensure proactive management of risk and compliance with timely risk mitigation, compliance controls and compliance submissions to management with tracking of gaps until closure in Group Technology.

Job Accountabilities

• Collect information and review documentation to ensure that risk scenarios are identified and evaluated. Identify legal, regulatory, and contractual requirements and organizational policies and standards related to information systems to determine their potential impact on the business objectives.
• Perform monthly/quarterly submissions and annual review on Bank/BNM Key Risk Indicators (KRI), Risk Control Self Assessments (RCSA), Compliance Self-Assessment Review (SSAR), Compliance Matrix (CMAX), Cyber Resilience Maturity Assessment (CRMA) and Management of Customer Information and Permitted Disclosures (MCIPD).
• Coordinate submissions on Technology Risk Dashboard on monthly basis to Technology Risk Management team and send all Risk & Compliance communications to Technology Staff on ad hoc basis.
• Collect and validate data that measure key risk indicators (KRIs) to monitor and communicate their status to relevant stakeholders in their decision-making process.
• Facilitate independent risk assessments and risk management process reviews to ensure they are performed efficiently and effectively.
• Review all the Department's documentations related to Risk and Compliance prior to submission to BRCM (for e.g. Master Service Agreement/ renewal Agreement/ Letter to BNM/ Guidelines and Procedures/ Due Diligence Checklist/ Cloud Risk Assessment/ Material Risk Assessments etc.) and provide advisories to IT Project Managers.
• Timely reporting/escalation of any compliance issue/breaches to respective BRCM and submission of Lost Event Report via GCM System for IT related Priority 1 & 2 incidents.
• Close monitoring of submission of Compliance documents reviews, surveys for BNM and PayNet queries/updates and BNM Reviews to ensure that they are done within agreed timeline.
• Any special assignment to undertake special/ad-hoc assignments as and when directed by Head, IT Risk & Compliance (ITRC).

Job Requirements

• Bachelor's degree in business, IT, Risk Management, or a related field or relevant certifications (e.g., CISA, CISSP, CRISC) is a plus.
• More than 3 years of relevant experience in risk and compliance.
• Proven experience in governance, risk management, or compliance roles, preferably in financial institutions.
• Strong knowledge of regulatory frameworks, industry standards, and best practices related to GRC.
• Exceptional analytical skills and the ability to assess complex risks and provide practical solutions.
• Excellent communication and interpersonal skills to work effectively with cross-functional teams and external stakeholders.
• Detail-oriented with a commitment to maintaining the highest standards of integrity and ethics, strong organizational skills and the ability to prioritize and manage multiple tasks efficiently.