全职 Assistant Vice President 工作, 薪水, Lembaga Tabung Angkatan Tentera (LTAT) WP Kuala Lumpur 公司招聘中 - Ricebowl

• a) Bachelor’s degree in Information Security, Computer Science, Information Technology, or related discipline; or equivalent professional experience.

• b) Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent are preferred.

• c) Minimum 10 years of progressive experience in cybersecurity, information security, or IT governance, risk and compliance roles.

• d) Experience operating in regulated or government‑linked environments.

• e) Proven exposure to cybersecurity governance, audit engagement, regulatory compliance, and senior management reporting.

• f) Experience with incident response, crisis management, and business continuity planning.

• g) Familiarity with security technologies (e.g. SIEM, IAM, vulnerability management, cloud security) from a governance and oversight perspective

1. Enterprise Cyber Risk Management

• Establish, maintain, and continuously enhance LTAT’s cybersecurity risk management framework within ITMD, aligned with organisational risk appetite and enterprise risk management principles.

• Identify, assess, prioritise, and manage cyber risks across applications, infrastructure, cloud, data, and third‑party technology environments.

• Own and maintain the cybersecurity risk register for ITMD, including risk treatment plans, mitigation actions, and residual risk tracking.

• Translate technical cyber risks into business, financial, operational, and reputational impacts to support management decision‑making.

• Lead and oversee cybersecurity incident management, including escalation, response coordination, post‑incident review, and remediation actions.

2. Cybersecurity Governance & Compliance

• Act as the owner of cybersecurity governance, policies, standards, and procedures within ITMD, aligned with recognised frameworks (e.g. NIST CSF, ISO/IEC 27001) and applicable regulatory requirements.

• Ensure consistent implementation, monitoring, and enforcement of cybersecurity controls, including governance over policy exceptions and risk acceptances.

• Lead engagement with regulators, auditors, and assurance providers on cybersecurity matters, and oversee timely closure of audit findings.

• Govern third‑party and vendor cybersecurity risks, including security requirements, assessments, and compliance monitoring.

• Prepare and present cybersecurity risk and governance reports, dashboards, and updates to IT Steering Committee (ITSC), EXCO, and relevant management forums.

3. Security Architecture, Controls & Integration

• Provide governance oversight to ensure security‑by‑design and security‑by‑default principles are embedded across systems, infrastructure, cloud platforms, and data environments.

• Collaborate with Enterprise Architecture, Digital, Infrastructure, and Application teams to ensure cybersecurity requirements are integrated into system design and technology initiatives.

• Oversee the effectiveness of cybersecurity controls and identify opportunities for optimisation, automation, and continuous improvement.

4. Security Awareness, Culture & Capability

• Define and govern LTAT’s security awareness and culture strategy within ITMD, ensuring cybersecurity accountability is embedded across technology teams and stakeholders.

• Establish KPIs and effectiveness measures for security awareness and training programmes, while delegating operational delivery as appropriate.

• Promote a strong security culture that balances risk management with operational efficiency and business agility.

5. Leadership, Advisory & Stakeholder Engagement.

• Serve as a trusted advisor to senior management on cybersecurity, governance, and technology risk matters.

• Communicate complex cybersecurity issues clearly to technical and non‑technical stakeholders.

• Influence business and technology stakeholders to ensure cybersecurity supports organisational objectives.

• Lead, mentor, and develop cybersecurity governance resources within ITMD.

6. Additional Responsibilities

• Support crisis management and executive decision‑making during major cybersecurity incidents.

• Undertake additional assignments as directed by LTAT management.

• Annual Leave
• EPF
• SOCSO
• EIS