We are seeking a Security Engineer to support technology risk governance, cybersecurity risk assessments, regulatory compliance and control assurance. The role involves identifying technology risks, monitoring remediation activities and ensuring alignment with applicable regulatory requirements, including Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT).
Key Responsibilities
- Maintain technology risk governance frameworks and support compliance with regulatory requirements and internal policies.
- Conduct technology and cybersecurity risk assessments to identify control gaps, evaluate risk exposure and recommend mitigation measures.
- Monitor risk issues, audit findings, remediation plans and key risk indicators (KRIs).
- Prepare risk reports and provide updates to management on control effectiveness and remediation progress.
- Coordinate internal and external audits, control reviews and assurance activities.
- Conduct third-party security risk assessments (TPSAs) and support supply chain security risk management.
- Review and maintain information security policies, standards and procedures.
- Monitor emerging cybersecurity risks and support appropriate risk mitigation measures.
- Collaborate with IT, cybersecurity, business and risk teams to address control gaps and improve risk management practices.
- Support regulatory engagement and provide relevant risk documentation and updates when required.
Requirements
- Minimum 8 years of experience in technology risk management, cybersecurity governance, IT risk and control, or information security.
- Strong knowledge of BNM RMiT and relevant regulatory frameworks.
- Experience in technology risk assessments, control assurance, audit coordination and risk remediation.
- Good understanding of third-party security risk assessments (TPSA), risk reporting and governance frameworks.
- Strong analytical, documentation and stakeholder management skills
Pay: RM13,000.00 - RM15,000.00 per month
Work Location: In person