Assistant Manager, Technology Security Operations

We fuel the ideas and ambitions of our people with an environment built on Our DNA of Love, Entrepreneurship, Agility, and Passion – LEAPWe are a culture that empowers everyone to innovate and create solutions that will leave a positive impact on our communities and our nation, Touch ‘n Go will always be here to inspire our talents to grow as leaders and innovators giving you the power to make a differenceWhat would you do:Technology & Cyber Risk ManagementOwn and maintain the centralized Technology & Cyber Risk Register, ensuring risks are accurately identified, assessed, documented, monitored, and reportedPerform risk assessments across IT infrastructure, applications, cloud environments, cybersecurity controls, and technology operationsDefine and maintain risk ratings, risk ownership, mitigation strategies, compensating controls, and risk acceptance recordsEnsure technology and cyber risks are managed in accordance with internal governance standards and regulatory requirements, including NACSA Arahan No. 5 and Bank Negara Malaysia's Risk Management in Technology (RMiT) frameworkFacilitate periodic risk reviews with stakeholders and ensure risk treatment plans are implemented and tracked to completionIdentify emerging technology and cyber threats and assess their potential impact on the organizationAudit & Regulatory CoordinationAct as the primary liaison and coordinator for all technology and cybersecurity-related audits, reviews, and regulatory assessmentsCoordinate audit activities involving Internal Audit, External Audit, regulators, and other assurance functionsManage requests for information, evidence collection, documentation reviews, and audit responsesTranslate audit observations and regulatory findings into actionable remediation plans with clear ownership and accountabilityMonitor remediation progress and ensure findings are resolved within agreed timelinesMaintain comprehensive records and evidence repositories to support audit readiness and regulatory complianceTrack all audit and regulatory findings through to formal closure and validationIT & Cyber Issue ManagementEstablish and maintain a centralized IT & Cyber Issue Register encompassing audit findings, vulnerability assessment results, penetration testing findings, security alerts, operational issues, and control weaknessesDrive the end-to-end issue management lifecycle, including identification, assessment, assignment, tracking, validation, and closureEnsure issue owners are accountable for implementing effective remediation actions within established timelinesMonitor remediation Service Level Agreements (SLAs) and escalate overdue, high-risk, or unresolved issues to managementValidate closure evidence to ensure issues have been effectively remediated and associated risks adequately mitigatedIdentify recurring issues, systemic weaknesses, and trends to support continuous improvement initiativesCross-Functional CoordinationServe as the central coordination point between IT Operations, Security Operations, technology teams, vendors, and service providersEnsure effective collaboration and communication across stakeholders involved in risk mitigation and issue remediation activitiesManage cross-functional dependencies and facilitate timely resolution of technology and cybersecurity issuesDrive proactive follow-up and governance oversight to prevent issues from being overlooked or delayedSupport the resolution of complex issues requiring engagement across multiple functionsGovernance, Risk & Compliance (GRC) EnablementAct as the key interface between technical teams and governance functions, including Risk Management, Compliance, and AuditTranslate technical findings and cybersecurity concerns into meaningful business risk impacts for management and governance stakeholdersInterpret regulatory, risk, and compliance requirements and coordinate implementation activities with technology teamsEnsure consistency and traceability across risk registers, issue registers, audit findings, and remediation plansSupport governance reviews, risk assessments, policy compliance activities, and control effectiveness reviewsGovernance Reporting & Stakeholder Management Prepare and present regular reports and dashboards on technology risks, cybersecurity issues, audit findings, remediation progress, and compliance statusProvide meaningful analysis and recommendations to support risk-based decision-making by senior management and governance committeesSupport risk prioritization, mitigation planning, and risk acceptance discussionsDeliver accurate, timely, and consistent reporting to the Head of IT Security, CTO, Risk Committees, and other governance forums.Escalate significant risks, control deficiencies, and remediation delays to appropriate management levels where requiredWho should join us:Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Risk Management, or a related disciplineProfessional certifications such as CISA, CISM, CRISC, CISSP, CGEIT, or ISO 27001 Lead Auditor/Lead Implementer are highly desirableMinimum 5 years of experience in Technology Risk Management, Cybersecurity Governance, IT Audit, IT Compliance, Information Security, or related disciplinesKnowledge of technology risk management and cybersecurity governance praticeFamiliarity with NACSA Arahan No. 5, BNM RMiT, ISO 27001, NIST Cybersecurity Framework, and related industry standardsStrong stakeholder management and communication skillsExcellent analytical, problem-solving, and coordination abilitiesStrong report writing and presentation skillsAbility to influence stakeholders and drive accountability across technical and non-technical teams.Strong organizational skills with the ability to manage multiple priorities simultaneouslyOur Perks & Benefits:Hybrid work arrangement and flexi hours.e-Wallet meal allowance.Unlimited office pantry fruits, snacks and drinks.Mobile and broadband subscription reimbursement.Flexibility to opt dependents coverage (spouse, child, parents or parents-in-law) for outpatient medical benefits.Additional leave including family leave and paid care leave to care for family members.Medical coverage including dental, optometrist, mental care, maternity, registeredTraditional Chinese Medicine (“TCM”) and Chiropractic.Corporate membership discount and many more to explore.We believe that you have what it takes to fit into the Touch ‘n Go family and help revolutionize the Fintech industry by paving the way to a cashless society. If you're ready to take the next step, apply now!Touch ‘n Go is an organization that strives to provide Equal Opportunity Employment, based on merit, qualifications, capabilities, and calibre. It is Touch ‘n Go’s policy to not discriminate based on age, race, religion, colour or other personal status, identity or characteristics. Fair Opportunity is Our Value and Practice. Please advise us of any accommodations you may need by e-mailing: careers@touchngo.com.myNote: Only shortlisted candidates will be contacted.