Chief Information Security Officer

About the Role The CISO will own information security and technology risk for doit Holdings, our regulated investment platform in Malaysia, and will be the person the board names as responsible for technology risk under the Securities Commission's Guidelines on Technology Risk Management. Nothing exists yet. The framework, the controls, the monitoring and the evidence all have to be built, and they have to hold up to an independent assessment before the platform can be registered. What you will be doing Hold the board-appointed responsibility for day-to-day technology risk oversight and for delivering the board's cyber security strategy. Build the technology risk and cyber security frameworks, the risk appetite statement and the policy set beneath them, and keep them approved and current.…