Security Engineer

Job Responsibilities:

• Maintain the technology risk governance framework and support relevant certifications and compliance with Bank Negara Malaysia's RMiT policy and other regulatory requirements.
• Support the development and review of IT and cybersecurity risk appetite statements, governance strategies, and control frameworks.
• Coordinate the Information Security Working Committee and related governance forums.
• Lead periodic technology and cybersecurity risk assessments and control assessments, documenting findings, tracking risk exposure, and recommending mitigation measures.
• Manage open risk items, monitor remediation progress, and escalate unresolved risks to relevant stakeholders.
• Prepare key risk metrics and reports for management review.
• Support internal and external audits, conduct third-party security risk assessments (TPSA), and monitor audit findings through to closure.
• Monitor external threat intelligence and escalate emerging cybersecurity risks.
• Review, maintain, and communicate information security policies, standards, and procedures, ensuring compliance across the IT department.
  

Job Requirements:

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, Information Systems, or a related field, or equivalent experience.
• Minimum 6 years of relevant experience in information and cybersecurity risk management, preferably within the financial services industry.
• Professional certifications such as CISSP, CISA, CISM, CRISC, or CGEIT are an added advantage.
• Excellent communication skills, with the ability to engage technical and non-technical senior stakeholders.
• Solid understanding of technology, IT operations, and cloud environments; hands-on experience is an added advantage.