Technology Risk & Compliance Specialist

AFFIN Group; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

AFFIN Group in Kuala Lumpur is seeking an experienced IT Risk & Compliance professional to drive governance, risk management, and regulatory compliance across technology functions. You will coordinate KRIs, control assessments, and documented submissions to management, collaborating with cross-functional teams.

The role requires 3+ years in risk/compliance in financial institutions, strong knowledge of GRC frameworks, and excellent communication skills to engage with stakeholders and regulators

Qualifications

• Bachelor's degree in business, IT, risk management or related field; relevant certs welcomed.
• 3+ years of risk and compliance experience in financial institutions.
• Knowledge of regulatory frameworks and GRC best practices.
• Excellent communication and collaboration skills.

Responsibilities

• Identify and evaluate risk scenarios and applicable laws and policies.
• Submit and review KRIs, RCAs, SSAR, CMAX, CRMA, and MCIPD reports.
• Coordinate monthly technology risk dashboard submissions.
• Collect and validate KRIs data for stakeholder decisions.
• Support independent risk assessments and process reviews.
• Escalate compliance issues to BRCM and document incidents in GCM.
• Monitor BNMs reviews and PayNet queries within timelines.
• Undertake ad-hoc IT risk/compliance assignments as directed.

Skills

Analytical skills

Communication

Attention to detail

Risk management

Education

Bachelor's degree in business, IT, risk management or related field

CISA

CISSP

CRISC

Tools

GRC tools

Job description

AFFIN Group in Kuala Lumpur is seeking an experienced IT Risk & Compliance professional to drive governance, risk management, and regulatory compliance across technology functions. You will coordinate KRIs, control assessments, and documented submissions to management, collaborating with cross-functional teams.

The role requires 3+ years in risk/compliance in financial institutions, strong knowledge of GRC frameworks, and excellent communication skills to engage with stakeholders and regulators