Technology & Cyber Risk Analyst

NTT DATA Payment Services; Kuala Lumpur; On-site; MYR 80,000 - 100,000; Full time

Job summary

A leading payment services provider in Kuala Lumpur is seeking a Cybersecurity Specialist to manage compliance operations and drive cybersecurity strategy. The role involves maintaining policies for compliance, managing vulnerability assessments, and ensuring timely compliance certification for industry standards. Ideal candidates should have a Bachelor's degree in a relevant field, at least 4 years of cybersecurity governance experience, and professional certifications like CISM or CISSP to effectively oversee cybersecurity operations.

Qualifications

• Minimum of 4 years of cybersecurity governance experience.
• Proficiency in developing and implementing security controls.
• Strong understanding of relevant cybersecurity regulations.

Responsibilities

• Develop and maintain compliance program policies and procedures.
• Operationalise company's Cybersecurity Strategy and Risk Management.
• Drive compliance certification for PCIDSS and manage compliance operations.

Skills

Cybersecurity governance experience

Developing and implementing security controls

Understanding of cybersecurity regulations

IT operations with an information security perspective

Education

Bachelor's degree in Computer Science, Information Security, Cyber Security or equivalent

Professional certification (CISM, CISA, CISSP or equivalent)

Job description

Develop, initiate, maintain, and revise policies and procedures for the proper operation of the compliance program and its related activities.

Operationalise the Company’s Cybersecurity Strategy, Technology Risk Management, Technology Operations Governance Management, and Cybersecurity Management.

Drive the annual execution, maintenance, and timely compliance certification for PCIDSS, managing day-to-day compliance operations, and collaborating with internal stakeholders to ensure project alignment with cybersecurity best practices and PCIDSS requirements.

Manage and oversee vulnerability scans, penetration testing, internal audits, and third-party risk assessments to promptly address findings and implement corrective action plans for IT compliance vulnerabilities.

Ensure effective communication of information security landscape and ongoing projects to staff and management, while serving as an independent review and evaluation body to resolve compliance issues.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Cyber Security, or equivalent.
• Minimum of 4 years of cybersecurity governance experience, including proficiency in developing and implementing security controls.
• Strong understanding of relevant cybersecurity regulations and standards (e.g., BNM Risk Management in Technology, PCI DSS, NIST Cybersecurity Framework).
• Clear understanding of IT operations with an information security perspective and its interaction with risk appetites to ensure compliance with industry, regulator, and card scheme requirements.
• Professional certification such as CISM, CISA, CISSP or equivalent.