Leadership and Strategic Oversight
· Mentor a team of IT Security Specialist
· Assist section head to define and maintain the security advisory and risk assessment framework aligned with corporate cybersecurity strategy.
Risk Assessment and Governance
· Oversee enterprise and project-level security risk assessments, ensuring all critical systems, projects and changes are evaluated.
· Establish a standardized process for identifying, classifying, and mitigating IT and cyber security risks.
· Maintain the security risk register and ensure tracking and closure of mitigation plans.
· Report significant risks and mitigation progress to senior management and governance committees.
· To align and execute IT security risk assessment according to Group Risk IT risk assessment methodology
Project Security Review
· Lead security assessments for new IT and digital transformation projects, ensuring compliance with policies and guideline
· Review solution designs and architectures to identify potential vulnerabilities or control gaps.
· Provide formal risk acceptance or go-live recommendations and documented in NFR
· Integrate “security-by-design” principles into project lifecycle processes.
RFP and Vendor Security Evaluation
· Oversee security reviews for RFPs, vendor solutions, and third-party engagements.
· Ensure security requirements are clearly defined in RFPs and vendor contracts.
· Coordinate and review third-party risk assessments and recommend mitigation actions.
Operational Excellence
- Monitor performance, completeness and effectiveness of all managed security tools and controls.
- Implement automation and process improvement to reduce operational overhead
- Define KPIs and SLAs for tool uptime, incident response and compliance posture.
Governance, Risk, and Compliance
· Ensure all security controls meet internal and external regulatory requirements.
· Own the documentation of policies, procedures, operation manual and security standards related to managed systems
· Lead internal and external audits for the security technologies under this section.
· Drive remediation plans for audit findings and ensure timely closure.
What We Do
We are a multinational regional financial services provider that is committed to deliver complete solutions to our clients through differentiated segment offerings and an ecosystem that supports simple, fast and seamless customer experience, underpinned by cohesive and inspired workforce and relationship built with stakeholders Headquartered and listed in Malaysia, RHB Banking Group is the longest established local bank, formed though the mergers of several banks, the oldest of which was founded in 1913. RHB Banking Group and its subsidiaries provide a full range of services ranging from retail banking, business banking, corporate and investment banking, Islamic banking, transaction banking to treasury, insurance, asset management, private equity and stockbroking services. TOGETHER WE PROGRESS Our strong heritage is the foundation of our commitment to continue serving the community. For over a 100 years, we have been helping people and businesses grow and succeed, and will continue to do so. Our experience gives us an in-depth understanding of the needs of our customers and partners, inspiring us to constantly innovate and improve to serve them better. With their unending support, we have established ourselves with a strong footprint throughout Malaysia and we are now present in 9 other countries across the ASEAN region. We hope our legacy and pursuit for excellence continues as we tirelessly cultivate and nurture the next generation through our actions and words, preparing a brighter future ahead. We thank those who believe in us and welcome everyone to join us on our exciting journey of progress. The time has come for us to move forward in unison, to realise our greater potential together. Our new brand promise "Together We Progress” honours our past, celebrates the present and welcomes the future. We invite you to join us as we work towards a better and brighter future for all.
