Technology Risk & Resilience Manager

KAF Group; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

KAF Group is seeking an experienced 2LoD Risk Manager to oversee technology risk across governance, risk management and cyber resilience. You will review risk assessments, challenge incidents, and ensure reporting to senior management and the board.

You will develop and maintain the Technology Risk Management Framework (TRMF) and Cyber Resilience Framework (CRF), monitor KRIs on outages, threats, patching, and capacity, and ensure policy alignment with regulatory expectations.

Responsibilities

• Reviewing and challenging the 1LoD’s risk self-assessments (RCSA), project risk assessments, and incident root-cause analyses.
• Developing, maintaining, and updating the Technology Risk Management Framework (TRMF) and Cyber Resilience Framework (CRF).
• Defining, monitoring, and reporting KRIs related to IT outages, cyber threats, patch management, and system availability to senior management and the Board Risk Committee.
• Ensuring all IT and cybersecurity policies align with internal risk appetite statements and regulatory expectations.
• Reviewing mandatory regulatory assessments, such as the Technology Risk Assessment (TRA) for new digital services or cloud adoptions.

Job description

KAF Group is seeking an experienced 2LoD Risk Manager to oversee technology risk across governance, risk management and cyber resilience. You will review risk assessments, challenge incidents, and ensure reporting to senior management and the board.

You will develop and maintain the Technology Risk Management Framework (TRMF) and Cyber Resilience Framework (CRF), monitor KRIs on outages, threats, patching, and capacity, and ensure policy alignment with regulatory expectations.