Full Time Security Project - Service Governance Jobs, in Skill Quotient Federal Territory - Maukerja

Role Purpose

The Technology Security Project & Service Governance Manager is responsible for overseeing cybersecurity governance, service management, financial management, project governance, operational reporting, and cyber resilience activities within Malaysia. The role serves as a key liaison between local Information Security, Technology, Business stakeholders, and Group Security functions to ensure effective delivery, oversight, and continuous improvement of cybersecurity services and initiatives.

The incumbent will establish governance processes, monitor service performance, manage security budgets and financial reporting, coordinate security projects, support regulatory and audit requirements, strengthen cyber resilience, and drive cybersecurity awareness programs across the organization.

Key Responsibilities

1. Security Financial Management & Reporting

• Manage the Information Security budget and expenditure tracking for Malaysia.
• Monitor security-related operational and project costs against approved budgets.
• Prepare monthly, quarterly, and annual financial reports for cybersecurity initiatives.
• Perform budget forecasting and variance analysis to support management decision-making.
• Track security investment utilization and benefits realization.
• Coordinate budget planning and funding requests with Technology, Finance, and Security stakeholders.
• Support procurement governance, vendor cost reviews, and contract renewals related to security services.

2. Security Service Management & Reporting

• Establish and maintain governance over cybersecurity services provided locally and by Group Information Security (GIS).
• Define, monitor, and report on security service performance metrics and KPIs.
• Produce regular management dashboards covering security operations, incidents, vulnerabilities, compliance status, and service performance.
• Track service delivery against agreed service levels (SLAs) and operational objectives.
• Coordinate service improvement initiatives and remediation actions arising from performance gaps.
• Ensure appropriate documentation of security services, procedures, and operational controls.

3. Security Project Management & Reporting

• Govern and oversee cybersecurity projects from initiation through implementation and closure.
• Monitor project progress, risks, dependencies, milestones, budget consumption, and resource utilization.
• Prepare management reports and executive updates on security project status.
• Coordinate with project managers, technology teams, vendors, and business stakeholders to ensure timely delivery.
• Support project governance forums and steering committee meetings.
• Ensure cybersecurity projects align with regulatory requirements, organizational priorities, and security strategy.

4. Security Service Reviews (GIS, APTB, AGB)

• Coordinate periodic service review meetings with Group Information Security (GIS), APTB, AGB, and relevant stakeholders.
• Assess service effectiveness, performance trends, operational risks, and improvement opportunities.
• Track action items, remediation plans, and service enhancement initiatives arising from reviews.
• Prepare comprehensive service review reports and management presentations.
• Facilitate discussions between local and regional stakeholders to resolve service issues and improve service delivery.

5. Business Continuity Planning for Cybersecurity

• Support development, maintenance, and testing of cybersecurity-related Business Continuity Plans (BCP) and Disaster Recovery (DR) arrangements.
• Coordinate cyber resilience exercises, tabletop simulations, and recovery testing activities.
• Ensure cybersecurity recovery requirements are integrated into business continuity and technology resilience frameworks.
• Monitor remediation actions arising from resilience assessments and testing activities.
• Support crisis management processes during major cybersecurity incidents.

6. Enhancing Cybersecurity Awareness

• Develop and execute cybersecurity awareness and education programs for employees.
• Coordinate phishing simulation campaigns and awareness assessments.
• Promote a strong cybersecurity culture through communication campaigns, training sessions, and engagement initiatives.
• Track and report security awareness metrics, participation rates, and effectiveness indicators.
• Work with business units and Human Resources to ensure awareness programs meet organizational and regulatory requirements.

7. Governance, Risk, and Stakeholder Management

• Prepare reports and presentations for management committees and governance forums.
• Identify and escalate operational, compliance, and service risks to management.

Key Performance Indicators (KPIs)

• Timely submission of security governance, service, project, and financial reports.
• Achievement of security budget targets and financial governance requirements.
• Security service performance against agreed KPIs and SLAs.
• On-time delivery of cybersecurity projects and initiatives.
• Closure rate of actions arising from service reviews and governance meetings.
• Successful completion of cyber resilience and business continuity testing.
• Security awareness participation rates and phishing simulation improvements.