VP, Technology Architecture & Resilience Advisory

CIMB; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

CIMB in Kuala Lumpur seeks an experienced Technology Risk professional to provide independent second-line oversight of the Bank's Technology Resilience framework. You will evaluate critical systems, third-party dependencies, and DR/testing outcomes to strengthen resilience and regulatory alignment.

Ideal candidates have 7–12 years in technology risk or information security, with CRISC/CISSP/CISM certifications and banking experience, plus a track record delivering governance papers and risk

Qualifications

• Bachelor's degree or higher in information technology, engineering, risk management or related discipline.
• Professional certifications: CRISC, CISSP or CISM are preferred.
• 7–12 years' experience in technology risk, risk governance, operational risk or information security.
• Experience in a banking or regulated financial services environment is preferred.

Responsibilities

• Provide independent second-line technology risk oversight and advisory for the Bank's Technology Resilience framework.
• Review resilience risks, recovery capabilities, RTO/RPO/MTD, and testing outcomes to ensure objectives are met.
• Monitor compliance with resilience policies, risk appetite, and regulatory requirements while reporting key risks and remediation actions.
• Prepare governance papers for senior management and Board committees; support governance initiatives.

Skills

Technology risk

Risk governance

Operational risk

Information security

Education

Bachelor's Degree in Information Technology / Engineering / Risk Management

CRISC

CISSP

CISM

Job description

CIMB in Kuala Lumpur seeks an experienced Technology Risk professional to provide independent second-line oversight of the Bank's Technology Resilience framework. You will evaluate critical systems, third-party dependencies, and DR/testing outcomes to strengthen resilience and regulatory alignment.

Ideal candidates have 7–12 years in technology risk or information security, with CRISC/CISSP/CISM certifications and banking experience, plus a track record delivering governance papers and risk