Kerja Sepenuh Masa, Manager di Sourceo - Maukerja

JOB DESCRIPTION

Position Summary

Manager is responsible for establishing, implementing and continuously improving the Technology Policy and Compliance Programme to strengthen governance maturity across the organisation.

The role ensures technology policies remain relevant and practical, drives compliance programmes, coordinates governance reviews, monitors policy implementation and partners with stakeholders to embed governance into day-to-day operations.

The successful candidate is expected to demonstrate strong ownership, analytical thinking and continuous improvement, balancing governance requirements with business enablement.

Key Responsibilities

1. Technology Policy, Governance Framework and Advisory

• Develop, review and maintain technology policies, standards, guidelines and supporting governance frameworks and operating procedures.
• Lead periodic policy reviews to ensure continued relevance and alignment with business, technology and regulatory changes.
• Translate governance principles into practical and implementable requirements.
• Coordinate policy consultation, approval and publication.
• Advise project teams and system owners on policy interpretation, and promote consistent governance practices across technology teams.

2. Technology Compliance Programme

• Develop and execute the annual technology compliance programme.
• Coordinate compliance assessments across technology domains.
• Analyse compliance results and identify recurring themes.
• Track remediation plans and monitor closure.
• Prepare governance and compliance reporting for management.

3. Audit Coordination

• Coordinate internal and external audit activities.
• Support evidence collection and audit responses.
• Monitor audit observations and remediation progress.

JOB REQUIREMENTS

Qualifications

• Degree in Information Technology, Information Systems, Computer Science, Business or related discipline.

Experience

• 3–5 years in IT governance, IT audit, technology compliance or information security governance.
• Working knowledge of the policy management lifecycle and risk and compliance concepts.
• Exposure to ISO 27001, COBIT or similar governance frameworks would be advantageous.
• Experience with AI governance frameworks such as ISO42001 and emerging AI regulatory requirements would be an added advantage.

BUSINESS SEGMENT

Corporate

PLATFORM

Operating Division