Cyber Security & Governance Project Manager – 1 year contract renewable (Experience in Insurance / Banking industry is a must)About the company:
A reputable insurance and financial services provider.
Role Purpose:
Oversee cybersecurity governance, service management, financial management, project governance, operational reporting, and cyber resilience. Act as the key liaison between local Information Security, Technology, Business stakeholders, and Group Security functions. Drive governance processes, monitor service performance, manage security budgets, coordinate projects, support regulatory compliance, strengthen cyber resilience, and lead cybersecurity awareness programs.
Key Responsibilities:Financial Management
- Manage the Information Security budget—track expenditure, monitor costs against approved budgets.
- Prepare monthly/quarterly/annual financial reports; perform forecasting and variance analysis.
- Track investment utilization and benefits realization.
- Coordinate budget planning with Technology, Finance, and Security stakeholders.
- Support procurement governance, vendor cost reviews, and contract renewals.
Service Management & Reporting
- Establish governance over local and Group Information Security (GIS) services.
- Define, monitor, and report on security service KPIs and SLAs.
- Produce management dashboards covering incidents, vulnerabilities, compliance, and service performance.
- Coordinate service improvement initiatives and track remediation actions.
Project Management
- Oversee cybersecurity projects from initiation to closure.
- Monitor progress, risks, dependencies, milestones, budget consumption, and resource utilization.
- Prepare executive updates and support project governance forums and steering committees.
- Ensure projects align with regulatory requirements and security strategy.
Service Reviews (GIS, APTB, AGB)
- Coordinate periodic service review meetings with Group Security and regional stakeholders.
- Assess service effectiveness, performance trends, and operational risks.
- Track action items and remediation plans; prepare comprehensive review reports.
Business Continuity & Cyber Resilience
- Support development, maintenance, and testing of cybersecurity BCP and DR arrangements.
- Coordinate cyber resilience exercises, tabletop simulations, and recovery testing.
- Integrate cybersecurity recovery requirements into resilience frameworks.
- Support crisis management during major incidents.
Cybersecurity Awareness
- Develop and execute employee awareness and education programs.
- Coordinate phishing simulations and awareness assessments.
- Promote a strong cybersecurity culture through campaigns and training.
- Track participation rates and effectiveness metrics; partner with HR as needed.
Governance & Stakeholder Management
- Prepare reports and presentations for management committees and governance forums.
- Identify and escalate operational, compliance, and service risks.
Education
- Bachelor's Degree in Information Security, Computer Science, IT, Risk Management, Business Administration, or related field.
Experience
- Information Security, Technology Governance, IT Service Management, Project Management, or Operational Risk.
- Financial services, banking, insurance, or regulated industries preferred.
- Proven experience in governance reporting, service management, project governance, and stakeholder management.
- Experience supporting cybersecurity programs and regulatory engagements is advantageous.
Key Competencies
- Cybersecurity Governance
- IT Service Management (ITSM)
- Portfolio & Project Governance
- Financial Planning & Budget Management
- Business Continuity & Cyber Resilience
- Management Reporting & Dashboard Development
- Vendor & Contract Management
- Regulatory & Compliance Management
Preferred Certifications
CISSP, CISM, CRISC, ITIL Foundation/Managing Professional, PMP, PRINCE2 Practitioner, ISO 27001 Lead Implementer/Auditor, CBCP or equivalent.
The salary for this position is up to RM 12,000.
Kindly submit your application to [Confidential Information]
Please be informed that only shortlisted candidate will be notified.
