Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Lead, Cybersecurity Risk management & Security Standard

RGE38 open roles

Where
Kuala Lumpur
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead, Cybersecurity Risk management & Security StandardRGE · Kuala Lumpur

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on RGE's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. RGE postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted yesterday

RGE median: 2 days open

The posting

Grow your career with us

Here at Averis, our common purpose is to improve lives by developing resources sustainably. Our people are crucial in helping us to realise our vision to be one of the best Global Business Solution (GBS) organization to support our customers in creating value for the Community, Country, Climate, Customer and Company.

Responsibilities:

Lead and continuously enhance the enterprise-wide Technology Risk Management function, providing independent oversight and governance over all technology-related risks including Cybersecurity, Information Security, Artificial Intelligence (AI), Cloud, On-Premise Infrastructure, Operational Technology (OT), Data Protection, Third-Party/Vendor, Digital Transformation, and Emerging Technology risks.

The role ensures technology risks are identified, assessed, prioritized, reported, and managed within the organization's risk appetite while supporting business growth, innovation, operational resilience, regulatory compliance, and digital transformation initiatives.

Act as a strategic advisor to executive management, technology leadership, risk committees, and board-level governance forums on technology risk matters.

Key Responsibilities

Technology Risk Governance

· Establish and maintain the Enterprise Technology Risk Management Framework.

· Define technology risk policies, standards, methodologies, risk appetite, and governance processes.

· Ensure alignment with Enterprise Risk Management (ERM) and Group Risk requirements.

Enterprise Technology Risk Oversight

· Lead identification, assessment, monitoring, and reporting of risks across:

o Cybersecurity & Information Security

o Cloud & Hybrid Infrastructure

o On-Premise Infrastructure

o Artificial Intelligence (AI) & Generative AI

o Operational Technology (OT), ICS & IoT

o Applications & Digital Platforms

o Data Protection & Privacy

o Third-Party & Supply Chain Technology Risk

o Technology Projects & Digital Transformation

o Business Continuity & Operational Resilience

· Oversee risk treatment plans and ensure timely remediation of control gaps.

· Work with OT lead/team on risk assessment and treatment

Risk Advisory & Business Partnership

· Provide independent technology risk advisory services to business and IT stakeholders.

· Support strategic initiatives, digital transformation, cloud adoption, AI implementation, and technology modernization programs.

· Challenge risk decisions and ensure alignment with organizational risk appetite.

Regulatory Compliance & Assurance

· Ensure compliance with applicable regulatory, legal, and industry requirements.

· Coordinate technology risk assessments, audits, certifications, and regulatory reviews.

· Monitor remediation of audit findings and compliance gaps.

Risk Reporting & Executive Engagement

· Develop and maintain technology risk dashboards, KRIs, KPIs, and executive reporting.

· Present technology risk posture, emerging threats, and key issues to management committees and senior leadership.

· Provide insights and recommendations to support risk-based decision-making.

Leadership & Risk Culture

· Promote a strong risk-aware culture across business and technology functions.

· Mentor and guide risk owners, control owners, and technology teams.

· Lead and develop a high-performing Technology Risk Management capability.

Cybersecurity Standard

· Develop, maintain, and continuously improve cybersecurity standards and security baselines for applications and IT infrastructure, aligned with industry best practices and organizational risk requirements.

· Develop, review, and maintain IT policies and governance frameworks to ensure security requirements are clearly defined, consistently implemented, and aligned with business and regulatory requirements.

Qualifications & Experience

Education

· Bachelor's Degree in Information Technology, Cyber Security, Risk Management, Computer Science, or related discipline.

· Master's Degree is an advantage.

Experience

· 8 - 10+ years of experience in Technology Risk, Cybersecurity, Information Security, IT Governance, IT Audit, or Enterprise Risk Management.

· Minimum 5 years in a leadership or management role.

· Experience in, shared services, manufacturing, industrial, or highly regulated environments is preferred.

Preferred Certifications

· CRISC

· CISSP

· CISM

· CISA

· CGEIT

· ISO 27001 Lead Auditor / Lead Implementer

· CCSP or equivalent Cloud Security certification

Technical Knowledge

Strong understanding of:

· ISO 27001

· NIST Cybersecurity Framework

· COBIT

· ISO 31000 / COSO ERM

· Cloud Security ( AWS, Aliyun, Google Cloud (Optional))

· AI & Generative AI Governance

· OT/ICS Security

· Third-Party Risk Management

· Data Protection & Privacy Regulations

· Business Continuity & Operational Resilience

· OT knowledge (added advantage)

When you send us your resume and personal details, it is deemed you have provided your consent for us to keep or store your information in our database. All the information you have provided is only used for the recruitment process. Averis will only collect, use, process or disclose personal information where and when allowed to under applicable laws. Only shortlisted candidates will be contacted for an interview. We endeavour to respond to every applicant. However, if you receive no response from us within 60 days, please consider your application for this specific position unsuccessful. We may contact you in the future if there are opportunities that match your qualifications and experience. Thank you for considering a career with Averis.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against RGE's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on RGE's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    RGE's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.