VP of IT Security & Risk Governance

NTT DATA Payment Services Sdn Bhd; Petaling Jaya; On-site; MYR 250,000 - 400,000; Full time

Job summary

NTT DATA Payment Services Sdn Bhd seeks a Vice President of IT Security, Governance and Control to lead the security strategy across local and group units, advising Senior Management and the Board on risk and compliance. The role covers policy, framework implementation, and ongoing security performance reporting to strengthen the organisation’s posture.

Responsibilities include threat modeling, incident response, patch management, and cross-functional capability building to foster a proactive

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity or related discipline.
• Minimum five years of management experience in information security/cyber risk.
• Professional certifications such as CISM, CISA, CISSP, PCI-ISA are a plus.
• Hands-on knowledge of PCI DSS, NIST CSF, PDPA or similar frameworks.
• Strong communication and stakeholder management skills; English proficiency required.

Responsibilities

• Support the implementation of information security strategy, framework, and policies across units.
• Advise Senior Management and the Board on information security, risk and compliance.
• Identify emerging cybersecurity technologies and enforce reporting on security performance.
• Lead incident response governance and patch management processes.
• Strengthen security culture and cross-functional capabilities across organization.

Skills

Leadership

Stakeholder management

English communication

Education

Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related discipline

Job description

NTT DATA Payment Services Sdn Bhd seeks a Vice President of IT Security, Governance and Control to lead the security strategy across local and group units, advising Senior Management and the Board on risk and compliance. The role covers policy, framework implementation, and ongoing security performance reporting to strengthen the organisation’s posture.

Responsibilities include threat modeling, incident response, patch management, and cross-functional capability building to foster a proactive