Vice President, GR NFRM TRM - Technology Architecture Advisory

CIMB Bank Berhad; Kuala Lumpur; On-site; MYR 350,000 - 550,000; Full time

Job summary

CIMB Bank Berhad, headquartered in Kuala Lumpur, seeks a Vice President in Technology Architecture Advisory to provide independent second-line technology risk oversight, challenge, and advisory for the Bank's Technology Resilience framework.

The role focuses on ensuring critical services, systems, and third-party dependencies are resilient and recoverable, aligned with risk appetite and regulatory requirements.

Qualifications

• Bachelor's Degree in Information Technology, Engineering, Risk Management, or related discipline.
• CRISC, CISSP or CISM certifications are preferred.
• 7–12 years' experience in technology risk, risk governance, operational risk, or information security.

Responsibilities

• Advise on design, implementation, and governance of the Technology Resilience framework.
• Identify critical systems and technology services supporting CBS.
• Contribute to technology risk appetite setting and dependency mapping.
• Provide independent risk oversight for disruption prevention, response, recovery, and resilience strategies.
• Review dependency mapping and assess operational resilience vulnerabilities.
• Oversee DR governance, recovery objectives, and failover strategies.
• Review DR testing outcomes across on-premises, hybrid, and cloud environments.

Skills

Technology risk governance

Regulatory engagement

Risk management

Project management

Stakeholder advisory

Education

CRISC

CISSP

CISM

Job description

Vice President, GR NFRM TRM - Technology Architecture Advisory

Provide independent second-line technology risk oversight, challenge, and advisory for the Bank's Technology Resilience framework. Ensure critical technology services, systems, infrastructure, and third-party dependencies supporting Critical Business Services (CBS) are resilient and recoverable. Ensure alignment with the Bank's risk appetite, operational resilience objectives, and regulatory requirements. Support the Bank's ability to prevent, withstand, respond to, and recover from technology disruptions. Strengthen the Bank's overall operational resilience and business continuity capabilities.

Key responsibilities

Advise stakeholders on the design, implementation, and governance of the Technology Resilience framework

Support identification of critical systems and technology services supporting Critical Business Services (CBS)

Contribute to technology risk appetite setting and end-to-end dependency mapping

Provide independent risk oversight for disruption prevention, response, recovery, and resilience strategies

Review dependency mapping and assess operational resilience vulnerabilities

Ensure technology disruption risks are adequately identified and managed

Oversee and challenge the mapping of applications, infrastructure, data flows, integrations, and third-party providers supporting CBS

Review and challenge the management of critical dependencies and concentration risks

Provide oversight of DR governance, recovery objectives, failover/failback strategies, and resilience-by-design practices

Review DR testing outcomes across on-premises, hybrid, and cloud environments

About you

Bachelor's Degree in Information Technology, Engineering, Risk Management, or a related discipline

Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)

7 - 12 years' experience in technology risk, risk governance, operational risk, or information security

Experience across First Line and Second Line roles

Experience in Technology Risk, Compliance, Audit, and Risk Governance

Risk framework management, risk appetite, and regulatory engagement experience

Exposure to third-party risk, operational risk, and fraud-related matters

Experience preparing governance papers for senior management and Board committees

Project management experience supporting governance or risk initiatives

Preferably within Banking or a regulated financial services environment

CIMB is one of ASEAN’s leading banking groups and Malaysia’s second largest financial services provider, by assets. Listed on Bursa Malaysia via CIMB Group Holdings Berhad, it had a market capitalisation of approximately RM81.6 billion as at 31 March 2026. It offers consumer banking, commercial banking, wholesale banking, transaction banking, Islamic banking and asset management products and services. Headquartered in Kuala Lumpur, the Group is present across ASEAN in Malaysia, Indonesia, Singapore, Thailand, Cambodia, Vietnam and the Philippines. Beyond ASEAN, the Group has market presence in China, Hong Kong and UK.

CIMB is one of ASEAN’s leading banking groups and Malaysia’s second largest financial services provider, by assets. Listed on Bursa Malaysia via CIMB Group Holdings Berhad, it had a market capitalisation of approximately RM81.6 billion as at 31 March 2026. It offers consumer banking, commercial banking, wholesale banking, transaction banking, Islamic banking and asset management products and services. Headquartered in Kuala Lumpur, the Group is present across ASEAN in Malaysia, Indonesia, Singapore, Thailand, Cambodia, Vietnam and the Philippines. Beyond ASEAN, the Group has market presence in China, Hong Kong and UK.