Cagamas Berhad Hiring! Full Time Head, Information - Data Security in Federal Territory - Ricebowl

Lead Cagamas’ information and data security function, driving cybersecurity strategy, governance, risk management, regulatory compliance, and security resilience across the organisation. This CISO-equivalent role reports directly to the Chief Risk & Compliance Officer (CRCO) and is responsible for safeguarding the organisation’s information assets, technology environment, and digital operations while supporting business growth and regulatory requirements.

KEY RESPONSIBILITIES:

1. Oversee cybersecurity governance frameworks, policies and standards to strengthen the organisation’s technology security environment.
2. Monitor cyber and technology security risks across infrastructure, applications, cloud environments and third-party arrangements.
3. Support compliance with regulatory requirements, including Securities Commission Malaysia’s Guideline on Technology Risk Management and Bank Negara Malaysia’s Risk Management in Technology (RMiT) policy.
4. Oversee cybersecurity incidents and ensure material risks are escalated promptly to Management and relevant governance committees.
5. Provide senior-level cybersecurity insights and reporting to support Management and Board-level oversight.
6. Work with IT and business units to promote secure technology implementation, data protection practices and organisation-wide security awareness.

REQUIREMENTS:

Education & Qualifications

1. Bachelor’s Degree in Information Security, Computer Science, Information Technology or a related discipline.
2. Professional certification such as CISSP, CISM, CRISC or equivalent. Additional certification such as CCSP or ISO 27001 Lead Implementer/Auditor will be an added advantage.

Experience & Skills

1. Minimum 10–15 years of experience in cybersecurity, technology risk, information security or related functions.
2. Experience in financial services or other regulated environments is preferred.
3. Good knowledge of cybersecurity frameworks, technology risk, data protection and regulatory expectations.
4. Strong analytical, stakeholder management, communication and reporting skills, with the ability to engage senior stakeholders effectively.

Why Join Us?

At Cagamas, you will play a key role in safeguarding the organisation’s information assets and strengthening cyber resilience, while contributing to a leading institution in Malaysia’s financial sector.

Note: Only shortlisted candidates will be contacted for the next steps in the selection process.