Job Description

Job Responsibilities: Technology & Cyber Risk An independent role from day-to-day technology operations which is responsible for planning, developing, communicating and reporting the effective implementation of the technology and cyber risk frameworks, policies and guidelines with the objective of mitigating technology risks, minimizing losses and disruption to business, and securing the technology assets against potential threats. Non-Financial Risk Management Emplace comprehensive and practical Non-Financial Risk Management (NFRM) frameworks, policies and procedures that facilitate effective risk management; Facilitate efficient implementation and enforcement of NFRM methodology and core policies for identification, measurement, monitoring and control for NFRM; Support the establishment strategic direction for Operational Risk Management (ORM) and Business Continuity Management (BCM) programs and implementation of ORM and BCM initiatives; Support the development of appropriate risk limits and controls to manage risk appetite and risk exposures; Job Requirements: Minimum of a Bachelor\'s Degree in Information Technology or equivalent, and relevant professional qualification (e.g. CISA, CISSP, CISM, CRISC) Minimum of 8 years\' experience in a risk, audit, compliance or information security function (banking and financial services industry experience will be an advantage) Work experience in relevant areas of IT risk, enterprise risk management and/or internal controls Knowledge of security frameworks (e.g. COBIT, ISF, COSO), standards (e.g. ISO, NIST), information security principles, security architecture and regulatory requirements will be a plus Exposure to technology requirements of key financial regulatory bodies (e.g. SC Malaysia, MAS and OJK.) Strong stakeholder engagement skills, and ability to interact at all levels across an organisation, and to influence others in moving toward a common vision or goal Excellent written and interpersonal skills Possess a proactive posture and committed to continuous improvement Collaboration and communication with multiple stakeholders within Maybank Group and/or external parties such as outsourced service providers, vendors and regulators. Resource challenge in performing required reviews to ensure effectiveness of implementation of frameworks, policies and procedures.

foundit