Senior Manager, Information & Technology Risk

AEON Bank WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

The Senior Manager, Information & Technology Risk (“SM”) is a managerial role responsible for leading the development, implementation, and oversight of the Bank’s cybersecurity and technology risk management framework. This role ensures compliance with regulatory requirements (e.g., BNM RMiT), drives cyber resilience initiatives, and manages risk assessments across technology domains. The incumbent will work closely with internal stakeholders, regulators, and third parties to safeguard critical systems and data, ensuring operational integrity and regulatory alignment. The role requires strong leadership, deep technical risk expertise, and the ability to balance security, innovation, and business needs.

In addition, the SM also plays a key role in identifying, assessing, and mitigating cyber and operational risks within their scope. This includes active engagement in risk governance processes related to technology operations oversight and reporting.

Job Responsibilities

Cybersecurity & Technology Risk Governance

• Establish and manage cybersecurity policies and risk frameworks : Lead the development and ongoing refinement of cybersecurity governance, policies, standards, and procedures in line with regulatory and industry best practices.
• Regulatory compliance : Ensure compliance with all applicable tech risk‑related regulations (e.g., BNM’s RMiT, tech standards) and serve as the liaison with regulators during audits, inspections, and inquiries.
• Develop and lead risk assessment processes : Oversee enterprise‑wide and targeted cybersecurity and technology risk assessments, identifying control gaps, vulnerabilities, and emerging threats.
• Technology risk registers and reporting : Maintain and update risk registers, perform risk ratings, and present findings and mitigation status to senior management and relevant risk committees.

System Implementation & Controls Assurance

Project Oversight & Regulatory Engagement

Operational Resilience & Incident Readiness

Job Requirements

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology and Analyst

#J-18808-Ljbffr