Manager IT (Cybersecurity Risk & Policy)
Salary: RM 11,000 – RM 13,000 per month
Manager IT (Cybersecurity Risk & Policy)
About the Role
We are seeking a Cybersecurity Risk & Policy Manager to lead the organization's cybersecurity governance, risk, and compliance initiatives. This role will be responsible for developing policies, managing risk assessments, and ensuring compliance with international standards and regulatory requirements.
Key Responsibilities
Lead enterprise cybersecurity risk identification, assessment, mitigation, and monitoring activities.
Develop, implement, and maintain cybersecurity policies, standards, and procedures.
Ensure compliance with frameworks such as ISO 27001, NIST, GDPR, and relevant industry regulations.
Conduct risk assessments, gap analyses, control reviews, and compliance evaluations across IT and OT environments.
Manage third-party and vendor cybersecurity risk programs.
Coordinate internal and external audit activities and remediation efforts.
Provide executive reporting on risk posture, compliance status, and policy adherence.
Deliver cybersecurity awareness and training initiatives.
Maintain and administer GRC platforms such as Archer and related solutions.
Monitor emerging cybersecurity threats, regulatory developments, and industry best practices.
Required Qualifications
Bachelor's Degree in Cybersecurity, Information Security, IT, or related discipline.
Minimum 7-10 years of cybersecurity governance, risk, and compliance experience.
Strong knowledge of ISO 27001, NIST, risk management methodologies, and regulatory compliance.
Hands-on experience with GRC platforms such as Archer, ServiceNow GRC, or similar.
Strong analytical and stakeholder engagement skills.