- Petaling Jaya Selangor Malaysia
Working Location
Job Description
Responsibilities
KEY RESPONSIBILITIES
· Support the execution and continuous improvement of technology governance frameworks, standards,
policies, procedures, and operational controls.
· Maintain and administer Technology Risk Registers, ensuring risks, action plans, mitigation activities,
ownership, and target completion dates are accurately tracked and reported.
· Monitor and report Key Risk Indicators (KRI), Key Control Indicators (KCI), Leading Event Data (LED),
technology risk metrics, and governance dashboards to support management oversight and decision-making.
· Track technology vulnerabilities, patch compliance status, remediation activities, and security control
implementation across infrastructure, platforms, and applications.
· Maintain oversight of technology assets reaching End-of-Support (EOS), End-of-Life (EOL), End-of-Service-Life
(EOSL), or End-of-Vendor-Support status, ensuring timely remediation, upgrades, or replacement planning.
· Support technology compliance assessments, audits, and regulatory reviews by coordinating evidence
collection, documentation validation, and remediation tracking.
· Monitor compliance against technology policies, standards, security baselines, and governance requirements,
identifying gaps and escalating non-compliance where necessary.
· Track audit observations, management action plans, and remediation activities arising from internal audits,
external audits, regulatory reviews, and risk assessments.
· Support the governance of third-party technology vendors by monitoring contractual obligations, service level
agreements (SLA), operational level agreements (OLA), performance metrics, and risk assessments.
· Assist in managing vendor governance activities including contract reviews, technology due diligence, periodic
service reviews, and renewal tracking.
· Coordinate and prepare governance reports, committee materials, risk updates, and management reporting
packs for Technology Governance forums and stakeholders.
· Maintain governance repositories, asset inventories, technology documentation, standards, and compliance
records to ensure accuracy and audit readiness.
· Collaborate with infrastructure, cloud, cybersecurity, application, and operations teams to ensure governance
requirements are incorporated into day-to-day technology operations.
· Support business continuity, disaster recovery, operational resilience, and technology risk management
initiatives through governance tracking and reporting activities.
_____________________________________________________________________________
Job Description – Senior Executive, Technology Governance 2
WHAT DOES IT TAKE TO BE SUCCESSFUL
Qualifications
· Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cybersecurity,
Engineering, or a related discipline.
· Professional certifications such as ITIL Foundation, COBIT Foundation, CRISC, CISA, ISO 27001, AWS Cloud
Practitioner, or equivalent certifications are advantageous.
· Understanding of technology governance, technology risk management, operational controls, cybersecurity
fundamentals, and regulatory compliance principles.
· Familiarity with governance frameworks, risk management methodologies, and control assurance practices is
preferred.
· Knowledge of technology infrastructure, cloud environments, and enterprise technology operations would be
advantageous.
Work Experience
· Minimum 3–5 years of experience within Technology Operations, Technology Risk, IT Compliance, IT Audit,
Infrastructure Operations, Cybersecurity, or related technology functions.
· Experience supporting governance reporting, risk management activities, compliance monitoring, or audit
coordination within enterprise environments.
· Exposure to managing or tracking technology risks, vulnerabilities, patch compliance, asset lifecycle
management, or operational control monitoring.
· Experience maintaining governance artefacts such as risk registers, issue registers, audit trackers, remediation
plans, and management reporting.
· Familiarity with vendor governance, contract management, SLA monitoring, or third-party risk management
processes is advantageous.
· Experience working within regulated industries such as financial services, insurance, telecommunications,
healthcare, or other compliance-driven environments is preferred.
· Exposure to cloud technologies, enterprise infrastructure, operating systems, databases, and technology
platforms would be beneficial.
Skills & Competencies
· Strong understanding of Technology Governance, Technology Risk Management, Operational Risk, and Control
Assurance practices.
· Knowledge of Key Risk Indicators (KRI), Key Control Indicators (KCI), Leading Event Data (LED), risk registers,
issue management, and remediation tracking processes.
· Familiarity with technology lifecycle governance, including patch management, vulnerability management,
EOS/EOL/EOSL tracking, and technology currency management.
· Understanding of infrastructure technologies including servers, operating systems, databases, networks, cloud
services, virtualization platforms, and cybersecurity controls.
· Working knowledge of governance, risk, and compliance frameworks such as COBIT, ISO 27001, NIST, CIS
Controls, and relevant regulatory requirements.
· Experience using governance, reporting, and collaboration platforms such as ServiceNow, Jira, SharePoint,
Confluence, Microsoft 365, Power BI, Excel, and risk management tools.
· Strong analytical and reporting skills with the ability to interpret technical data and translate findings into
meaningful governance insights.
· Excellent attention to detail, documentation, organization, and record management capabilities.
· Strong communication and stakeholder engagement skills with the ability to work effectively across technical
and non-technical teams.
· Proactive mindset with strong problem-solving capabilities and a commitment to continuous improvement
and governance excellence.
Work Location: Hybrid remote in Petaling Jaya
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.