Jawatan ini telah ditutup, tetapi kerja yang serupa masih dibuka.

Job Title: Technology Security Project & Service Governance Manager

Role Summary

The Technology Security Project & Service Governance Manager will be responsible for overseeing cybersecurity governance, security service management, project governance, financial management, operational reporting and cyber resilience activities in Malaysia.

The role will work closely with Local Information Security, Technology, Business stakeholders and Group Security functions to ensure effective delivery, governance and continuous improvement of cybersecurity services and initiatives.

Key Responsibilities

Security Financial Management

• Manage Information Security budgets and expenditure tracking.
• Monitor security operational and project costs against approved budgets.
• Prepare monthly, quarterly and annual financial reports.
• Perform budget forecasting and variance analysis.
• Track security investment utilisation and benefits realisation.
• Support procurement governance, vendor cost reviews and security contract renewals.

Security Service Management

• Establish and maintain governance over local and Group Information Security services.
• Monitor security service KPIs, SLAs and operational performance.
• Prepare management dashboards covering security operations, incidents, vulnerabilities, compliance and service performance.
• Identify service gaps and coordinate improvement and remediation activities.
• Maintain appropriate security service documentation and operational controls.

Security Project & Portfolio Governance

• Govern cybersecurity projects from initiation through implementation and closure.
• Monitor project milestones, risks, dependencies, budgets and resource utilisation.
• Prepare management and executive reports on project progress.
• Coordinate with project managers, technology teams, vendors and business stakeholders.
• Support project governance forums and steering committee meetings.
• Ensure cybersecurity projects align with regulatory requirements and security strategy.

Security Service Reviews

• Coordinate periodic service reviews with Group Information Security and relevant regional/local stakeholders.
• Assess service effectiveness, performance trends, operational risks and improvement opportunities.
• Track action items and remediation plans.
• Prepare service review reports and management presentations.

Cyber Resilience / BCP & DR

• Support cybersecurity Business Continuity Planning and Disaster Recovery arrangements.
• Coordinate cyber resilience exercises, tabletop simulations and recovery testing.
• Ensure cybersecurity recovery requirements are incorporated into technology resilience frameworks.
• Track remediation actions from resilience assessments and testing.
• Support crisis management activities during major cybersecurity incidents.

Cybersecurity Awareness

• Support cybersecurity awareness and employee education programmes.
• Coordinate phishing simulation campaigns and awareness assessments.
• Track awareness participation and effectiveness metrics.
• Work with HR and business units to support cybersecurity awareness requirements.

Governance & Stakeholder Management

• Prepare reports and presentations for management committees and governance forums.
• Identify, monitor and escalate operational, compliance and service risks.
• Act as a key liaison between Local Information Security, Technology, Business and Group Security teams.
• Drive governance improvements and continuous improvement initiatives.

Required Qualifications & Experience

• Bachelor//'s Degree in Information Security, Cybersecurity, Computer Science, IT, Risk Management, Business Administration or related discipline.
• Minimum 7 years of relevant experience; 8-10+ years preferred.
• Experience in Information Security, Technology Governance, IT Service Management, Project Management or Operational Risk.
• Proven experience in cybersecurity governance, service management, project governance and management reporting.
• Strong stakeholder management and communication skills.
• Experience managing multiple cybersecurity initiatives, services and stakeholders simultaneously.

Preferred Experience

• Financial services, banking, insurance or other regulated industry experience.
• Experience supporting cybersecurity programmes and regulatory/audit engagements.
• Experience working with regional or Group Information Security teams.
• Experience in security budget management and vendor governance.
• Experience with cyber resilience, BCP/DR and security awareness programmes.