VP, Cyber Risk & Third-Party Governance

Affin Pheim; Malaysia; On-site; MYR 120,000 - 180,000; Full time

Job summary

AFFIN is seeking an experienced IT risk professional to establish and oversee technology risk governance for the group. You will lead third-party risk assessments, monitor vendor security, and align risk appetite with the bank's standards.

The role requires a degree in IT/Computing, 5+ years in IT risk management, and certifications such as CRISC/CISSP; familiarity with Bank Negara Malaysia regulations is a plus.

Qualifications

• Degree in IT, IS or Computing required.
• Minimum of 5 years in IT risk management, cyber risk management, project risk management, third-party risk management.
• Certifications such as PMP, PMI-ACP, CEH, CRISC, and CISSP are advantageous.

Responsibilities

• Prepare and execute third-party cyber risk assessments, cloud risk assessments, project risk assessments and due diligence.
• Maintain and update risk inventories and ensure accurate documentation.
• Review vendor security documentation including SOC reports, ISO certifications, penetration test reports, and security questionnaires.
• Monitor vendor risk through reviews, assessments, and threat intelligence.
• Track risk remediation plans for third-party gaps and exceptions.
• Provide advisory on technology risks and ensure compliance with internal policies and regulatory guidelines.
• Support senior management in overseeing technology risk management implementation.

Skills

IT risk management

Cyber risk management

Project risk management

Third-party risk management

Regulatory knowledge

Education

Degree in IT/Computing

Job description

AFFIN is seeking an experienced IT risk professional to establish and oversee technology risk governance for the group. You will lead third-party risk assessments, monitor vendor security, and align risk appetite with the bank's standards.

The role requires a degree in IT/Computing, 5+ years in IT risk management, and certifications such as CRISC/CISSP; familiarity with Bank Negara Malaysia regulations is a plus.