VP Cyber Risk & Third-Party Governance

Affin Bank Berhad; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Affin Bank Berhad is seeking a seasoned IT risk management professional to establish and oversee governance of technology risk. The role focuses on aligning risk appetite and thresholds with the banking group, and building a program to identify, assess, monitor, and report significant technology risks.

The candidate will assess third-party cyber risk, review vendor security documentation, and support TPRM frameworks while staying abreast of regulatory changes affecting technology risk.

Qualifications

• Degree in IT, IS or Computing or related field.
• Minimum 5 years in IT risk management, cyber risk or third-party risk management.
• Professional certifications such as PMP, PMI-ACP, CEH, CRISC and CISSP are an advantage.

Responsibilities

• Prepare and execute third-party cyber risk assessments and due diligence.
• Maintain and update third-party risk inventories and project risk inventories.
• Review vendor security docs, SOC reports, ISO certs and pen test reports.
• Monitor vendor risk through reviews, assessments and threat intel.
• Track risk remediation plans for third-party gaps and exceptions.
• Provide advisory on technology risks, information security and controls.
• Support development of TPRM, project risk frameworks, and policies.

Skills

IT risk management

Information security

Regulatory compliance

Education

Degree in IT/IS/Computing

Job description

Affin Bank Berhad is seeking a seasoned IT risk management professional to establish and oversee governance of technology risk. The role focuses on aligning risk appetite and thresholds with the banking group, and building a program to identify, assess, monitor, and report significant technology risks.

The candidate will assess third-party cyber risk, review vendor security documentation, and support TPRM frameworks while staying abreast of regulatory changes affecting technology risk.