Senior IT Manager (Information Security, Risk & Governance)

Employer Highlight

• Global technology and financial services organisation with operations across multiple international markets, offering exposure beyond a purely local business.
• Large-scale consumer-facing platform serving tens of millions of users globally.
• Work with high-volume data and transactions, rather than typical internal enterprise applications.
• International and cross-functional exposure, with technology designed to support multiple markets globally and a product-driven environment, where engineers can see the direct impact of what they build on end users.
• Potential exposure to emerging areas such as Al-enabled products, APIs, data platforms and next-generation IT Governance, Risk & Compliance (IT GRC)

Key Responsibilities:

• Lead compliance with SC GTRM, Bursa Malaysia IT requirements, and other applicable regulatory frameworks.
• Govern cloud adoption according to Bursa's ICON-Cloud Computing practices, and Shared Responsibility Models.
• Oversee critical cybersecurity controls including MFA, PAM, EDR, patching and security monitoring.
• Lead Incident Response and ensure timely regulatory reporting and recovery readiness.
• Support the Head of IT in country-level IT strategy, infrastructure operations, and technology initiatives.

Skills Requirements:

• 5-8+ years in IT Risk, Governance, Cybersecurity, Infrastructure or IT Operations within Financial Services.
• Strong knowledge of SC GTRM, BNM RMiT and Bursa Malaysia IT requirements.
• Experience managing technology risk, regulatory compliance, security incidents, and infrastructure.
• Strong stakeholder management and advisory skills across business, technology and regional teams.
• CISA / CRISC preferred
• Mandarin/Chinese communication skills required.

Technical Competencies:

• Cybersecurity: MFA, PAM, EDR, vulnerability management and incident response.
• Infrastructure: Enterprise networks, servers, patching and production environments.
• Cloud Governance: Cloud risk, Shared Responsibility Model and Cloud Exit Strategy.
• IT GRC: Risk assessment, regulatory compliance, audit readiness and control frameworks.
• Business Continuity: Backup, disaster recovery and recovery planning.

Good to Have:

• Experience in Securities, Brokerage, FinTech, Banking or Capital Markets.
• Enterprise cloud and third-party technology management experience.
• CISSP, CISM, ISO 27001 or equivalent certifications.
• Experience working with regional/global technology teams.

Work Location:

• Bangsar South, (On-site)

Career Level:

• Senior IT Manager with 5-8+ years of relevant IT Risk, Cybersecurity, Infrastructure or IT Governance experience within Financial Services.