Chief Information Security Officer

Key ResponsibilitiesSecurity Strategy & Risk Management● Develop and execute a multi-year cybersecurity and risk strategy aligned with business growth● Establish security principles, guardrails, and risk frameworks across the organisation● Identify, assess, and manage risks across applications, infrastructure, and data platforms● Define and track security metrics and KPIs to measure and improve security posture Security Architecture & Engineering Partnership● Establish and govern security architecture principles and design guardrails● Partner with Engineering to embed security into the SDLC, including:○ design reviews○ threat modeling○ secure coding practices○ CI/CD integration● Champion DevSecOps practices, ensuring security is:○ integrated into developer workflows○ automated where appropriate○ scalable across teams● Provide clear, reusable patterns and guidance to enable teams to implement security effectivelySecurity Operations Oversight● Oversee key security functions, including:○ incident response○ vulnerability management○ threat monitoring● Ensure these functions are well-integrated into engineering and platform workflows, with clear ownership● Act as escalation point for major security incidents, including executive communication and post-incident reviewCustomer & Regulatory Security Leadership● Serve as the primary external-facing security leader for:○ regulators○ auditors○ enterprise and banking customers● Represent the organisation confidently in:○ regulatory reviews○ customer security assessments○ architecture and risk discussionsSecurity Culture & Collaboration● Foster a culture of shared ownership of security across teams● Work closely with Engineering and Product to ensure security:○ supports delivery○ aligns with real-world development practices● Build a security organisation that is seen as:○ enabling○ technically credible○ responsive to business needsGovernance, Risk & Compliance● Support the GRC team in enterprise security frameworks, including:○ PCI-DSS○ ISO 27001 / SOC 2○ BNM RMiT and related regulatory requirements● Represent the company in regulatory engagements, including interactions with Bank Negara Malaysia (BNM) and other authoritiesKey RequirementsSecurity Leadership Experience● 8+ years of experience in cybersecurity, information security, or related fields● Currently operating at Head / Director / Deputy CISO level, or equivalent● Strong progression across:○ security engineering / architecture○ governance / risk○ leadership roles