Head of Cybersecurity GRC

Newly created Head of Cybersecurity GRC role in KL

Your new company

Your new Company is a global corporate services and business solutions provider with an established international footprint. They support organisations in managing governance, compliance, and operational requirements while enabling business growth across multiple jurisdictions.

Your new role

• Cybersecurity Governance
  • Lead the development and execution of the Cyber Governance strategy aligned to business and cyber security objectives.
  • Define governance structures, policies, processes, decision forums, and accountability models.
  • Ensure cyber policies, standards, and controls remain effective, current, and aligned with regulatory expectations.
  • Provide independent assurance and reporting related to cyber risk management.
  • Drive continuous improvement of the cyber control environment and governance maturity
• Cybersecurity Risk Management
  • Establish and oversee enterprise-wide cyber risk management practices.
  • Lead risk assessments and facilitate treatment, acceptance, and escalation processes.
  • Monitor cyber risk exposure against appetite and regulatory requirements.
  • Develop risk metrics, KRIs, dashboards, and executive reporting.
  • Support governance processes including risk committees, audits, and regulatory engagements.
• Cybersecurity policy, standards & regulatory compliance
  • Own the lifecycle of cyber policies, standards, procedures, and control frameworks.
  • Ensure alignment with industry frameworks and regulatory obligations.
  • Oversee control effectiveness reviews and compliance monitoring.
  • Coordinate responses to internal audit, regulatory reviews, and external assessments.
  • Provide strategic oversight of cyber-related regulatory change initiatives.
• Cybersecurity awareness & culture
  • Lead organisation-wide awareness, education, and engagement programmes.
  • Develop culture initiatives that promote accountability and ownership of cyber risk.
  • Drive targeted awareness activities addressing credential protection, phishing, data handling, and secure practices.
  • Establish measurement frameworks to assess effectiveness and behavioural improvements.
  • Deliver executive-level cyber education and Board awareness initiatives.

What you'll need to succeed

• Has people management experience skills around 4-5 people
  
  
• Has experience working with global stakeholders
  
• Minimum of 12 years of exprience in IT GRC domain
  
  What you'll get in return
• A competitive monthly remuneration
  
• Opportunity to lead and manage a global team
  
• Attractive staff benefits
  

What you need to do now

If this role is what you are looking for, click Apply on the job itself.
For a private and confidential discussion on other job opportunities within IT Audit, you may reach out to me at +60 3-7890 6195 or [Confidential Information]
At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.