Manager, Assurance, Group Cyber & Technology Risk, Group Risk

Job Responsibilities:

This role provides assurance over technology and cyber regulatory compliance for the organization by monitoring and interpreting evolving regulatory requirements, evaluating the control effectiveness and ensure identified gaps remediation. Position also supports ongoing enhancement of governance, risk management, and compliance practices

Own the development and oversight of assurance programs & assess control effectiveness

•Design and implement assurance programs with Technology and Cyber Risk

•Provide periodic reports summarizing assurance activities, findings, and recommended improvements.

•Conduct periodic and ad‑hoc reviews of systems and processes

•Prepare reports summarizing assurance findings and recommended improvements

Lead the mapping of regulatory obligations and upkeep of the regulatory control library

•Map internal controls to regulatory requirements across multiple jurisdictions

•Identify overlaps, gaps, and remediation needs

•Recommend enhancements to strengthen regulatory alignment

•Maintain updated regulatory obligation and control libraries

•Record and update all obligations and controls in a central repository

•Regularly review for accuracy and completeness

Proactively monitor, assess, and interpret evolving regulatory requirements

•Track new and updated regulations, guidelines, circulars, and frameworks (e.g., BNM, OJK, MAS, NBC)

•Analyze the impact of regulatory changes on technology and cybersecurity operations

•Provide timely updates to stakeholders with clear impact assessments

•

Lead and deliver assurance awareness & education programs

•Develop and deliver targeted awareness sessions on frameworks, policies, and standards

•Share common audit gaps, findings, and recommended best practices

Job Requirements:

• Bachelor's degree equivalent professional qualification in IT programs
• Experiences as a Relevant experience in technology risk, cyber risk, IT audit, information security, or regulatory compliance.
• Certificates: Having any of these certifications is a plus (but not mandatory): ISACA's CRISC, CISM or ISC2's CISSP, SSCP, CCSP, CSSLP, CC
• Ability to navigate or coordinate project members.
• Ability to work independently on assigned tasks with minimal supervision, demonstrating initiative and a continuous learning mindset.