Drive enterprise-wide assessment and governance of security risks across Artificial Intelligence and emerging technologies, including GenAI misuse, adversarial machine learning, and Large Language Model (LLM) vulnerabilities.
Provide strategic oversight and advisory on compliance with Act 854, National Cyber Security Agency (NACSA) directives, Bank Negara Malaysia Risk Management in Technology (RMiT), and PDPA, ensuring the organisation maintains a robust and effective compliance posture.
Collaborate with legal and regulatory requirements, such as General Data Protection Regulation (GDPR), PDPA, Network and Information Security Directive 2 (NIS2), System and Organisation Controls 2 (SOC 2), Payment Card Industry Data Security Standard (PCI-DSS), and other applicable laws. Conduct internal security audits, gap assessments, and compliance reviews.
...
Assist in developing and maintaining Standard Operating Procedures (SOPs) or departmental guidelines for daily operations, ensuring alignment with the Pension Act 1980, Service Circulars, and Treasury Circulars.
Monitor services standard, daily workload, and turnaround times to plan workforce capacity that matches current workload.
Assist in ensuring that processes and controls are adhered to, mitigating operational loss and external fraud
...
Exposure to managing improvement initiatives
Knowledge of government employment terms and conditions is an advantage
Exposure to implementing ISO quality management systems and information security management systems