CTOS Hiring! Full Time Senior Executive, Technology Governance in Selangor - Ricebowl

ROLE OVERVIEW

We are seeking a diligent and detail-oriented Senior Executive, Technology Governance to support the implementation and execution of technology governance, risk management, and operational control activities across the organization. This role serves as a key contributor within the Technology Governance function, ensuring technology assets, services, and infrastructure remain compliant with internal policies, regulatory requirements, contractual obligations, and governance standards.

Working closely with technology teams, cybersecurity, risk management, procurement, vendors, and business stakeholders, the incumbent will be responsible for maintaining governance artefacts, tracking technology risks and remediation activities, monitoring technology control effectiveness, managing technology lifecycle governance, and supporting audit and regulatory requirements. The role plays an important part in strengthening operational resilience, technology compliance, and governance transparency across the organization.

KEY RESPONSIBILITIES

• Support the execution and continuous improvement of technology governance frameworks, standards, policies, procedures, and operational controls.
• Maintain and administer Technology Risk Registers, ensuring risks, action plans, mitigation activities, ownership, and target completion dates are accurately tracked and reported.
• Monitor and report Key Risk Indicators (KRI), Key Control Indicators (KCI), Leading Event Data (LED), technology risk metrics, and governance dashboards to support management oversight and decision-making.
• Track technology vulnerabilities, patch compliance status, remediation activities, and security control implementation across infrastructure, platforms, and applications.
• Maintain oversight of technology assets reaching End-of-Support (EOS), End-of-Life (EOL), End-of-Service-Life (EOSL), or End-of-Vendor-Support status, ensuring timely remediation, upgrades, or replacement planning.
• Support technology compliance assessments, audits, and regulatory reviews by coordinating evidence collection, documentation validation, and remediation tracking.
• Monitor compliance against technology policies, standards, security baselines, and governance requirements, identifying gaps and escalating non-compliance where necessary.
• Track audit observations, management action plans, and remediation activities arising from internal audits, external audits, regulatory reviews, and risk assessments.
• Support the governance of third-party technology vendors by monitoring contractual obligations, service level agreements (SLA), operational level agreements (OLA), performance metrics, and risk assessments.
• Assist in managing vendor governance activities including contract reviews, technology due diligence, periodic service reviews, and renewal tracking.
• Coordinate and prepare governance reports, committee materials, risk updates, and management reporting packs for Technology Governance forums and stakeholders.
• Maintain governance repositories, asset inventories, technology documentation, standards, and compliance records to ensure accuracy and audit readiness.
• Collaborate with infrastructure, cloud, cybersecurity, application, and operations teams to ensure governance requirements are incorporated into day-to-day technology operations.
• Support business continuity, disaster recovery, operational resilience, and technology risk management initiatives through governance tracking and reporting activities.

WHAT DOES IT TAKE TO BE SUCCESSFUL

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Engineering, or a related discipline.
• Professional certifications such as ITIL Foundation, COBIT Foundation, CRISC, CISA, ISO 27001, AWS Cloud Practitioner, or equivalent certifications are advantageous.
• Understanding of technology governance, technology risk management, operational controls, cybersecurity fundamentals, and regulatory compliance principles.
• Familiarity with governance frameworks, risk management methodologies, and control assurance practices is preferred.
• Knowledge of technology infrastructure, cloud environments, and enterprise technology operations would be advantageous.

Work Experience

• Minimum 3–5 years of experience within Technology Operations, Technology Risk, IT Compliance, IT Audit, Infrastructure Operations, Cybersecurity, or related technology functions.
• Experience supporting governance reporting, risk management activities, compliance monitoring, or audit coordination within enterprise environments.
• Exposure to managing or tracking technology risks, vulnerabilities, patch compliance, asset lifecycle management, or operational control monitoring.
• Experience maintaining governance artefacts such as risk registers, issue registers, audit trackers, remediation plans, and management reporting.
• Familiarity with vendor governance, contract management, SLA monitoring, or third-party risk management processes is advantageous.
• Experience working within regulated industries such as financial services, insurance, telecommunications, healthcare, or other compliance-driven environments is preferred.
• Exposure to cloud technologies, enterprise infrastructure, operating systems, databases, and technology platforms would be beneficial.

Skills & Competencies

• Strong understanding of Technology Governance, Technology Risk Management, Operational Risk, and Control Assurance practices.
• Knowledge of Key Risk Indicators (KRI), Key Control Indicators (KCI), Leading Event Data (LED), risk registers, issue management, and remediation tracking processes.
• Familiarity with technology lifecycle governance, including patch management, vulnerability management, EOS/EOL/EOSL tracking, and technology currency management.
• Understanding of infrastructure technologies including servers, operating systems, databases, networks, cloud services, virtualization platforms, and cybersecurity controls.
• Working knowledge of governance, risk, and compliance frameworks such as COBIT, ISO 27001, NIST, CIS Controls, and relevant regulatory requirements.
• Experience using governance, reporting, and collaboration platforms such as ServiceNow, Jira, SharePoint, Confluence, Microsoft 365, Power BI, Excel, and risk management tools.
• Strong analytical and reporting skills with the ability to interpret technical data and translate findings into meaningful governance insights.
• Excellent attention to detail, documentation, organization, and record management capabilities.
• Strong communication and stakeholder engagement skills with the ability to work effectively across technical and non-technical teams.
• Proactive mindset with strong problem-solving capabilities and a commitment to continuous improvement and governance excellence.