- Kuala Lumpur Federal Territory Malaysia
Lokasi Kerja
Penerangan Kerja
Tanggungjawab
Develop and execute a multi-year cybersecurity and risk strategy aligned with business growth
Establish security principles, guardrails, and risk frameworks across the organisation
Identify, assess, and manage risks across applications, infrastructure, and data platforms
Define and track security metrics and KPIs to measure and improve security posture
Establish and govern security architecture principles and design guardrails
Partner with Engineering to embed security into the SDLC, including:
design reviews
threat modeling
secure coding practices
CI/CD integration
Champion DevSecOps practices, ensuring security is:
integrated into developer workflows
automated where appropriate
scalable across teams
Provide clear, reusable patterns and guidance to enable teams to implement security effectively
Oversee key security functions, including:
incident response
vulnerability management
threat monitoring
Ensure these functions are well-integrated into engineering and platform workflows, with clear ownership
Act as escalation point for major security incidents, including executive communication and post-incident review
Serve as the primary external-facing security leader for:
regulators
auditors
enterprise and banking customers
Represent the organisation confidently in:
regulatory reviews
customer security assessments
architecture and risk discussions
Foster a culture of shared ownership of security across teams
Work closely with Engineering and Product to ensure security:
supports delivery
aligns with real-world development practices
Build a security organisation that is seen as:
enabling
technically credible
responsive to business needs
Support the GRC team in enterprise security frameworks, including:
PCI-DSS
ISO 27001 / SOC 2
BNM RMiT and related regulatory requirements
Represent the company in regulatory engagements, including interactions with Bank Negara Malaysia (BNM) and other authorities
8+ years of experience in cybersecurity, information security, or related fields
Currently operating at Head / Director / Deputy CISO level, or equivalent
Strong progression across:
security engineering / architecture
governance / risk
leadership roles
Peringatan Penting
Jangan pernah kongsikan maklumat bank atau kad kredit anda semasa memohon pekerjaan. Elakkan membuat sebarang pembayaran atau mengisi survey yang tidak berkaitan. Jika ada yang mencurigakan, sila laporkan iklan pekerjaan ini segera.