全职 Associate Director, IT Governance, Risk and Compliance 工作, 薪水, DKSH Federal Territory 公司招聘中 - Ricebowl

About the Role

As the Associate Director, IT Governance, Risk and Compliance (GRC), you play a pivotal leadership role in shaping DKSH's enterprise cybersecurity posture and ensuring robust governance across the organization. You drive the maturity of IT GRC practices, enabling DKSH to operate securely, meet global compliance standards, and manage technology risk with confidence and precision.

What You Will Deliver

• Define and drive the strategic direction for DKSH's IT GRC function, ensuring alignment with organizational priorities and delivering measurable improvements in governance maturity.
• Lead and develop a team of cybersecurity professionals, building and operationalizing IT GRC practices that are effective, scalable, and embedded across the enterprise.
• Own the end-to-end development, implementation, and validation of cybersecurity policies, standards, procedures, and guidelines that strengthen DKSH's overall security posture.
• Lead and sustain DKSH's ISO 27001 compliance and certification program, ensuring controls remain effective and audit-ready at all times.
• Define and implement the IT Risk Framework and Internal Controls Assessment Framework, driving a proactive technology risk mitigation program across the organization.
• Champion a center of excellence for cybersecurity management, fostering continuous improvement and optimization of security solutions and processes.
• Deliver clear, actionable reporting to senior leadership on controls effectiveness, operational efficiencies, and risk exposure.
• Lead information security risk assessments and guide controls selection to reduce the organization's exposure to evolving cyber threats.
• Oversee compliance monitoring activities to ensure adherence to ISO 27001 practices, internal security policies, and applicable laws and regulations.
• Lead client contract reviews and support the Request for Proposal (RFP) process and contract management for IT-related matters.
• Support information security incident investigations and post-incident reviews from an IT GRC perspective, ensuring lessons learned are captured and acted upon.
• Lead security awareness and training programs that equip stakeholders with the knowledge to uphold DKSH's security standards.
• Stay current on emerging security and privacy legislation, regulations, adversaries, and vulnerabilities to ensure DKSH's defenses remain ahead of the threat landscape.

What You Bring

• Bachelor's degree in Computing, Information Technology, or an equivalent discipline.
• At least 10 years of experience in a similar role, with a minimum of 5 years in a management position.
• Deep expertise in IT governance frameworks, policy management, risk management practices, and IT GRC tools.
• Familiarity with IT infrastructure and solutions, including Windows and Linux operating systems, Active Directory (AD), Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), Intrusion Prevention Systems (IPS), Endpoint Detection and Response (EDR), routers, switches, and virtualization environments, is advantageous.
• Proven ability to manage complex, large-scale, remote environments spanning diverse cultures and time zones.
• Strong sense of ownership and initiative in identifying, improving, and optimizing processes and closing operational gaps.
• Excellent written and verbal communication skills, with the ability to convey security and risk-related concepts clearly to both technical and non-technical stakeholders.
• Demonstrated ability to work independently while collaborating effectively with diverse, multi-stakeholder teams.

Why Join DKSH

At DKSH, we help companies grow in Asia and enable people to perform at their best. You will be part of an organization that values accountability, collaboration, and long-term partnerships. We offer a dynamic environment where your contributions are visible and where you can build a meaningful career in IT Governance, Risk and Compliance.

#LI-SW2