Vice President, Cybersecurity Strategy, Governance & Projects

Bursa Malaysia Berhad; Kuala Lumpur; On-site; MYR 420,000 - 560,000; Full time

Job summary

Bursa Malaysia Berhad is seeking a Vice President to lead Cybersecurity Strategy, Governance & Transformation. You will drive the multi-year cybersecurity roadmap, align initiatives with business objectives, and oversee governance, risk and regulatory coordination at a group level.

You will report to the CISO Office, liaise with executive management and boards, and steer initiatives across AI, cloud, data security and software supply chains to strengthen cyber resilience.

Qualifications

• Bachelor's degree in a cybersecurity or related field.
• Professional cybersecurity certification such as CGEIT, CISM, CRISC, PMP, PRINCE2, ITIL, COBIT or equivalent.
• Minimum 10 years of experience in cybersecurity, governance, risk or transformation.
• Experience engaging executive management and Board committees.
• Experience leading enterprise-wide governance or strategic initiatives.
• Experience managing regulatory, audit or governance-related engagements.

Responsibilities

• Lead the cybersecurity strategy, governance and transformation agenda for Bursa Malaysia Group.
• Drive strategic planning, executive governance, performance management and transformation oversight.
• Ensure cybersecurity priorities align with business objectives, regulatory expectations and risk considerations.
• Prepare and coordinate reports and presentations for Board Committees and senior management.
• Lead maturity assessments, benchmarking and integration of new technologies.
• Oversee cyber transformation initiatives from planning to implementation.
• Establish governance structures and accountability for cybersecurity initiatives.
• Coordinate audits, regulatory engagements and remediation governance.
• Engage stakeholders and manage portfolio planning and investment governance.
• Develop governance standards for emerging technologies and digital transformation.

Skills

Cybersecurity strategy

Executive governance

Stakeholder engagement

Leadership

Education

Bachelor's Degree in Cybersecurity/Information Security

Tools

CGIIT/CISM/CRISC (certifications)

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Vice President, Cybersecurity Strategy, Governance & Projects

To lead the cybersecurity strategy, governance and transformation agenda for Bursa Malaysia Group by driving strategic planning, executive governance, performance management and transformation oversight across the cybersecurity function. The role is responsible for ensuring cybersecurity priorities remain aligned with business objectives, regulatory expectations and enterprise risk considerations through effective governance, executive reporting, stakeholder engagement and strategic programme oversight. The position serves as the governance and transformation arm of the CISO Office, supporting executive decision-making, Board reporting and enterprise-wide coordination of cybersecurity initiatives.

1. Cybersecurity Strategy Execution

• Lead the development, maintenance and execution of the Group Cybersecurity Strategy and multi-year roadmap.
• Facilitate enterprise-wide consultation and alignment on cybersecurity strategic initiatives.
• Lead the preparation and coordination of cybersecurity reports, briefings and presentations for Board Committees, Executive Committees and senior management.
• Ensure timely reporting of cybersecurity performance, strategic risks and transformation progress.
• Lead cybersecurity maturity assessments and benchmarking to identify improvement opportunities and monitor alignment with regulatory expectations and industry standards.

2. Cyber Transformation

• Identify emerging strategic opportunities and initiatives to improve cyber resilience and organisational maturity.
• Lead enterprise-wide cyber transformation initiatives from planning through implementation.
• Monitor programme delivery, milestones, benefits realization and strategic outcomes.
• Identify and elevate delivery risks, resource constraints and interdependencies.
• Drive accountability across stakeholders responsible for delivering strategic cyber initiatives.

4. Cyber Governance Framework Management

• Establish and maintain governance structures, decision-making processes and accountability mechanisms for cybersecurity initiatives.
• Oversee cybersecurity policy governance, exception management and governance forums.
• Promote consistency and effectiveness of cyber governance practices across the Group.
• Drive alignment between business, technology, risk and compliance stakeholders

5. Audit & Regulatory Coordination

• Lead coordination of cybersecurity-related audits, reviews and regulatory engagements.
• Oversee management responses, remediation governance and closure tracking.
• Ensure timely reporting and escalation of significant governance or compliance issues.
• Coordinate enterprise responses to regulatory enquiries and information requests.

6. Stakeholder & Enterprise Engagement

• Build and maintain effective relationships with business divisions, technology teams, risk functions and corporate stakeholders.
• Facilitate cross-functional collaboration on cybersecurity governance and transformation matters.
• Oversee cybersecurity portfolio planning, resource allocation and investment governance.
• Support development of business cases and funding proposals.
• Monitor strategic programme expenditures and benefits realization.
• Provide management visibility over portfolio performance and strategic priorities.

8. Leadership & Capability Development

• Lead and develop the Cyber Strategy, Governance & Transformation team.
• Foster strong governance, programme management and strategic planning capabilities.
• Promote a culture of accountability, collaboration and continuous improvement.
• Act as a trusted advisor to the CISO on strategic, governance and transformation matters.
• Lead governance and oversight of cybersecurity risks arising from AI, cloud, data security, software supply chains and emerging technologies.
• Assess cybersecurity implications of emerging technologies and digital transformation initiatives.
• Develop cybersecurity standards and governance requirements for emerging technology adoption.
• Report emerging trends, systemic concerns and risk breaches to management and Board governance forums.
• Conduct horizon scanning on emerging cyber threats, technologies, regulatory developments and industry trends.

Job Requirements

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, Risk Management or related discipline.
• Professional cybersecurity certification such as CGEIT, CISM, CRISC, PMP, PRINCE2, ITIL, COBIT or equivalent.
• Minimum 10 years of experience in cybersecurity, technology governance, enterprise risk management, strategic planning, transformation programmes or related disciplines.
• Experience engaging executive management, Board Committees and senior stakeholders.
• Experience leading enterprise-wide governance, transformation or strategic initiatives.
• Experience managing regulatory, audit or governance-related engagements.