Head of IT Governance & Security Data Protection |Malaysian Bank project| Bangsar South| Up to RM20K
Position: Head of Security Governance and Data Protection
Position level: Vice President (VP) level
Company background: IT Services & IT Solutions
Project: Support Malaysian Bank projects
Salary: RM18k-20k (please provide your most competitive salary expectation)
Working location: Bangsar South, KL
Employment type: Permanent
Position Overview
Our client a Malaysian Bank who are building their Digital capabilities along with a cutting edge Security program are hiring a Section Head for their Security Governance, Compliance, Authentication and Data Loss Prevention. This role will oversee the organisation's data protection strategies and compliance programs. Reporting to the CISO, this leadership role will focus on ensuring the protection of sensitive data, adherence to compliance regulations, and the implementation of robust data loss prevention policies. The ideal candidate will have a strong domain knowledge in governance frameworks, data protection laws, and compliance management.
Key Responsibilities:
- Team Leadership & Development: Build and lead a team specializing in Security and Data Governance, as well as cryptography, and Authentication. Ensure the team works closely to manage privileged access and compliance policies effectively.
- Data Protection & Privacy: Lead the implementation of Data Loss Prevention (DLP) and data protection strategies.
- Governance and Compliance: Oversee compliance with internal and external audits, ensuring adherence to policies across all departments. Ensure all compliance activities align with the latest legal and regulatory standards.
- Security Framework Compliance: This includes Malaysian regulatory as well as industry standards such as PCI-DSS and Data Protection Acts.
- Authentication: Lead initiatives in Identity and Access Management (IAM), focusing on process design, technology acquisition in areas cuch as role-based access control.
- Policy & Procedures Oversight: Develop and monitor the progress of compliance policies. Ensure that the organization follows established procedures for data protection, internal and external audits, and remediation.
- Strategic Compliance Planning: Stay current with industry trends and regulatory changes, ensuring that the organization is always aligned with the latest compliance standards.
Required Skills & Experience:
- Proven hands-on working knowledge in Cyber Security Frameworks, Authentication, Data Loss Prevention and Data Protection standards.
- Proven experience in leading teams in governance and compliance functions, with an in-depth understanding of the regulatory landscape.
- Extensive experience in compliance risk management and implementation of governance frameworks.
- Strong leadership skills, with the ability to manage cross-functional teams focused on compliance and data protection.
- Excellent communication and stakeholder management skills.
- 10+ years of progressive experience in information security and/or risk and compliance roles within the banking or financial services sector.
- Strong understanding of banking regulations, cyber security frameworks, and IT governance (e.g. NIST, COBIT, ISO 27001, FFIEC).
Desired Qualifications:
- Degree in Cybersecurity, Information Security, or related field.
- Certifications such as CISA, CISSP, CISM, or other governance and compliance related certifications.
Job Types: Full-time, Permanent
Pay: RM18,000.00 - RM20,000.00 per month
Benefits:
- Professional development
Schedule:
- Monday to Friday
Application Question(s):
- Do you have work experience in banking regulations, cyber security frameworks, and IT governance (e.g. NIST, COBIT, ISO 27001, FFIEC)? Pls share which one you have?
- How many years of work experience do you have in information security and/or risk and compliance roles within the banking or financial services sector?
Experience:
- information security/risk &compliance roles in Bank: 10 years (Preferred)
License/Certification:
- CISA/ CISSP/ CISM (Preferred)
Work Location: In person