Lead, Cyber Governance
On-siteKuala Lumpur, Kuala Lumpur, Malaysia
Job Summary
Develop and continuously improve the bank's cyber governance framework aligned to BNM RMIT, NIST CSF, and ISO 27001 standards. Own the RMIT controls register, policy lifecycle, and risk register while producing gap analyses and KRI dashboards for the Board and regulators. Coordinate cyber drills, third-party vendor assessments, and audit activities to ensure regulatory compliance and remediation tracking. Maintain AI security governance documentation and support the AI Ethics Committee for new system deployments. Report directly to the Head of Cyber Security and bridge the 1st-line security function with the 2nd-line CISO. Requires 5-7 years in cyber governance within a regulated financial institution.
Required Qualifications
- 5-7 years in cyber security governance, technology risk, or GRC roles
- Experience owning a controls framework and producing regulatory-grade risk reporting
- Strong familiarity with BNM RMIT requirements
- Experience engaging directly with regulators (BNM), external auditors, and board-level stakeholders
Desired Qualifications
- Familiarity with AI governance frameworks (ISO 42001, NIST AI RMF, Treasury FS AI RMF)
- Excellent written communication
- Strong regulatory translation ability
- Organised and detail-oriented
- Ability to influence without authority
- Familiarity with GRC tooling (Jira GRC, ServiceNow, or equivalent)
- CISM certification
- CISA certification
- CRISC certification
- ISO 27001 Lead Implementer certification
- ISO 27001 Lead Auditor certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.