Vice President, IT Security, Goverance and Control

NTT DATA Payment Services Sdn Bhd; Petaling Jaya; On-site; MYR 250,000 - 400,000; Full time

Job summary

NTT DATA Payment Services Sdn Bhd seeks a Vice President of IT Security, Governance and Control to lead the security strategy across local and group units, advising Senior Management and the Board on risk and compliance. The role covers policy, framework implementation, and ongoing security performance reporting to strengthen the organisation’s posture.

Responsibilities include threat modeling, incident response, patch management, and cross-functional capability building to foster a proactive

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity or related discipline.
• Minimum five years of management experience in information security/cyber risk.
• Professional certifications such as CISM, CISA, CISSP, PCI-ISA are a plus.
• Hands-on knowledge of PCI DSS, NIST CSF, PDPA or similar frameworks.
• Strong communication and stakeholder management skills; English proficiency required.

Responsibilities

• Support the implementation of information security strategy, framework, and policies across units.
• Advise Senior Management and the Board on information security, risk and compliance.
• Identify emerging cybersecurity technologies and enforce reporting on security performance.
• Lead incident response governance and patch management processes.
• Strengthen security culture and cross-functional capabilities across organization.

Skills

Leadership

Stakeholder management

English communication

Education

Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related discipline

Job description

Vice President, IT Security, Goverance and Control

Support the implementation of NTT DATA Payment Services’ information security strategy, framework, policies, and related information security and compliance requirements across local and group strategic business units.

Maintain a comprehensive understanding of information security across both internal and external payment ecosystems, with the ability to provide strategic advice and support to Senior Management and the Board on information security, risk and compliance matters.

Implement the information security strategy and framework, identify and recommend emerging cybersecurity technologies and technology compliance solutions and proactively strengthen the organisation’s overall security posture.

Regularly assess and report on information security performance, including key risks, trends and areas for improvement and manage financial budgeting for information security initiatives to support the organisation’s cybersecurity vision and target security posture.

Represent NTT DATA Payment Services in engagements with external stakeholders, including law enforcement agencies, customers, participants and service providers on cybersecurity and information security-related matters.

Strengthen cross-functional capabilities across NTT DATA Payment Services to effectively manage technology security, information security risks and compliance requirements.

Establish and embed appropriate security culture and behavioural objectives within the overall information security strategy, promoting security awareness and accountability across the organisation.

Review and enhance functional structures, roles, and responsibilities to ensure adequate focus, resources and accountability are in place to support the successful execution of the information security strategy.

Develop and maintain an information security threat model and threat landscape to support security use‑case tuning, security reporting, threat monitoring and incident response activities.

Establish automated patch management reporting for Security Management and periodically review patching thresholds and requirements to ensure they remain aligned with the evolving cyber threat landscape.

Ensure appropriate crisis communication training is conducted regularly for relevant stakeholders to strengthen organisational preparedness and response capabilities.

Establish and maintain a comprehensive suite of incident response processes, reporting templates, communication protocols and governance requirements to formalise ecosystem messaging and coordination during cybersecurity incidents.

Conduct comprehensive reviews and establish improvement initiatives across Governance, Risk and Compliance (GRC), network analytics and integrated asset inventory capabilities to enhance the effectiveness and efficiency of cybersecurity response activities.

Review, strengthen and continuously improve information security reporting to provide management with timely, accurate, and actionable insights into the organisation’s security posture.

Monitor the progress of risk treatment plans and ensure timely escalation and reporting of significant risks, delays and outstanding remediation actions to Security Management.

Perform other ad-hoc duties and responsibilities as assigned by the immediate supervisor from time to time.

Requirements :

Bachelor’s Degree in Information Technology (IT), Computer Science, Cybersecurity, or a related discipline, with relevant experience in managing cyber risk within financial market infrastructures, critical national infrastructure, security intelligence, or equivalent environments.

Minimum of five (5) years of management experience in information security, cybersecurity, cyber risk, or related areas.

Professional certifications such as CISM, CISA, CSXP, CISSP, CREST, GPEN, CCISO, PCI-ISA, or equivalent certifications will be an added advantage.

Hands‑on experience and practical knowledge of cybersecurity standards, regulatory requirements, and industry best practices, including PCI DSS, Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT), PayNet requirements, VISA, Mastercard, ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), Personal Data Protection Act (PDPA), or equivalent frameworks will be an added advantage.

Strong understanding of end‑to‑end IT operations, including the integration and interdependencies between IT, business operations, risk management, regulatory compliance, and information security.

Self‑motivated and able to work independently with minimal supervision and under broad direction, while demonstrating strong ownership, accountability, and sound judgement in carrying out responsibilities and making decisions.

Excellent interpersonal, communication, stakeholder management, and relationship‑building skills, with the ability to engage effectively with stakeholders at all levels, including Senior Management, business users, participants, vendors, and team members.

Excellent command of written and spoken English is essential.

Pay range and compensation package: Salary and compensation details will be discussed during the interview process.

Equal Opportunity Statement: NTT Data Payment Services is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

At NTT DATA Payment Services, we empower businesses across Southeast Asia with reliable, secure, and innovative payment solutions—both online & offline.

With a strong presence in Malaysia, the Philippines, and Thailand, our reach spans more than 480,000 payment touchpoints across the region. As a one‑stop payment solutions provider, we serve businesses of all sizes, from retail to enterprise, delivering seamless transaction experiences backed by over 30 years of industry expertise.

As part of NTT DATA Japan, one of the world’s top 10 global IT service providers, we combine deep local insights with world‑class technology and innovation to help businesses grow & succeed in the digital economy.

At NTT DATA Payment Services, we empower businesses across Southeast Asia with reliable, secure, and innovative payment solutions—both online & offline.

With a strong presence in Malaysia, the Philippines, and Thailand, our reach spans more than 480,000 payment touchpoints across the region. As a one‑stop payment solutions provider, we serve businesses of all sizes, from retail to enterprise, delivering seamless transaction experiences backed by over 30 years of industry expertise.

As part of NTT DATA Japan, one of the world’s top 10 global IT service providers, we combine deep local insights with world‑class technology and innovation to help businesses grow & succeed in the digital economy.