Technology Risk & Governance Lead (ISO 27001 & PCI)

Tech Staffing; Kuala Lumpur; On-site; MYR 180,000 - 360,000; Full time

Job summary

Tech Staffing partners with a Fintech firm to hire a Lead, Technology Risk & Governance to oversee security governance across Asia operations. The role focuses on ensuring compliance with ISO 27001, PCI DSS, managing security risks and implementing Governance, Risk, and Compliance (GRC) tools and processes.

You will lead risk assessments, audit support, and act as SME for security certifications, while collaborating with business leaders to deploy security frameworks and controls.

Qualifications

• 8+ years in IT Security, Data Protection, Governance, Risk Management or Audit.
• Certified CISSP/CISA/CISM preferred.
• Strong knowledge of cloud security, data protection and governance frameworks (COBIT/ISO 27001).

Responsibilities

• Lead security governance across Asia operations and align with policies and regulatory standards.
• Ensure ISO 27001 and PCI DSS compliance and support certifications.
• Act as SME for risk mitigation, certifications and ongoing security/regulatory requirements.
• Conduct risk assessments, audits and support accreditation for internal and outsourced activities.
• Be the main contact for external audit activities.
• Develop and maintain the Security Management System (SMS).
• Collaborate with leaders to deploy security frameworks and controls.
• Lead investigations into security incidents and provide actionable reports to management.
• Monitor cloud security across AWS, Azure, GCP, Kubernetes and data protection practices.
• Utilize Grafana, Kibana, Power BI to manage and report security posture.

Skills

IT Security

Data Protection

Governance

Risk Management

Audit

Cloud Security

Education

Bachelor’s degree in IT or related field

Tools

Grafana

Kibana

Power BI

Job description

Tech Staffing partners with a Fintech firm to hire a Lead, Technology Risk & Governance to oversee security governance across Asia operations. The role focuses on ensuring compliance with ISO 27001, PCI DSS, managing security risks and implementing Governance, Risk, and Compliance (GRC) tools and processes.

You will lead risk assessments, audit support, and act as SME for security certifications, while collaborating with business leaders to deploy security frameworks and controls.