Bjakcareer

Chief Information Security Officer

Malaysia, Remote. Posted 11 days ago

The role

The CISO will own information security and technology risk for doit Holdings, a regulated investment platform in Malaysia. This person will build the security framework, controls, monitoring, and evidence from the ground up.

What you will do

  • Hold board-appointed responsibility for day-to-day technology risk oversight and delivering the cyber security strategy.
  • Build technology risk and cyber security frameworks, risk appetite statement, and policy set.
  • Run security operations including monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development.
  • Own incident response from detection through recovery and report to the SC.
  • Take the platform through independent technology validation for registration.
  • Take ISO/IEC 27001 from scoping through to certification.
  • Deliver the annual cyber security awareness programme.

Required qualifications

  • At least 8 years in information security, including 5 years in financial services or another regulated sector.
  • At least one of CISSP, CISM or CISA.
  • Deep command of the SC's Guidelines on Technology Risk Management.
  • Real depth in cyber security, operational resilience, and cloud and third-party risk.
  • ISO/IEC 27001 implementation experience through to certification.
  • A degree in computer science, information technology, information security or a cognate discipline.
  • Able to meet the SC's fit and proper criteria.
  • Hands-on operating style.
  • Strong English communication.

Nice to have

  • ISO/IEC 27001 Lead Implementer or Lead Auditor
  • CRISC
  • CCSP
  • Experience of an SC or BNM technology examination

Before you apply

  • Candidates should be based in, or able to work from, the location where the role is advertised.
  • Interview process includes an introductory conversation, technical and regulatory deep dive, and CEO final round.
  • Candidates who complete assessments quickly will be prioritized.

About the company

Doit is focused on reinventing how people spend, save, invest, exchange, and travel. They built the leading insurance platform in Southeast Asia.