search Browse Jobs
Manager Group IT Governance Risk and ComplianceDKSH · WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia
DKSH logo

DKSH

company page ↗

Manager Group IT Governance Risk and Compliance

🗓️ Posted 2026-09-12 WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market RM10,000–RM18,000/mo

About the Company

About DKSH DKSH's purpose is to enrich people's lives. For over 160 years, we have been marketing, selling, and distributing high-quality products and brands for multinational and Fortune 500 companies. Through our Business Units Consumer Goods, Healthcare, Performance Materials, and Technology, we deliver sustainable growth for our partners. We contribute to improving the quality of life for our employees and people in the local communities in which we operate. Headquartered in Switzerland, DKSH is publicly listed and operates in 35 markets across Asia Pacific, Europe, and North America. We employ over 26,800 specialists and produced net sales of CHF 11.1 billion in 2025. Why it's great to work with us At DKSH, we are driven by a purpose that goes beyond the ordinary: enriching people's lives. Through the products and services we provide, DKSH positively impacts millions of lives everyday. Join our team where entrepreneurship meets flexible work arrangements. Take the leap and start a journey where you can grow and make a difference Learn more about working at DKSH: https://bit.ly/dksh-careers View jobs now: https://bit.ly/dksh-jobs We do not send job offers from free email services (Gmail, Yahoo mail, Hotmail, etc.), request money from candidates, or require personal documents like bank account details, tax forms, or credit card information from candidates before they are hired: https://bit.ly/dksh-recruitment-disclaimer. Business Consulting and Services Specialties: Market Expansion Services, Sourcing, Research and analysis, Marketing and sales, Distribution and logistics, After-sales services, Consumer Goods, Technology, Healthcare, Specialty Chemicals, Fast-Moving Consumer Goods, Food Services, Consumer Health, Medical Devices, Personal Care Ingredients, Pharmaceutical Ingredients, Food and Beverage Ingredients, OTC, Hospitality Equipment, Packaging, Printing and Converting, Precision Machinery, Scientific Instrumentation, Specialized Industrial Applications, Luxury & Lifestyle, Semiconductor & Electronics, Internet of Things, Industrial Materials & Supply, Market Insights

About the Role

This role is an excellent opportunity in the Cybersecurity team to be part of IT GRC practitioners. This position will assist the IT GRC lead to support and provide management of IT governance practices within DKSH. Ideally, someone who has strong IT governance, compliance and audit knowledge and IT security skills as a core competency. This position will have ownership to define, implement, document, and validate the implementation of IT governance framework and security controls, processes and regulatory compliance and driving maturity of the overall IT GRC practices within DKSH.

Responsibilities

  • ● Support the execution of strategic direction for the function, from planning, implementing, and budgeting to motivational and promotional activities expounding the value of IT GRC.
  • ● Member of cybersecurity professionals on operational activities to build, run and operationalize IT GRC practices with stakeholders.
  • ● Report and escalation to leadership management team on controls effectiveness and operational efficiencies.
  • ● Implement and promote IT GRC framework, policies, standards, IT risk management and GRC tools across DKSH.
  • ● Promote and support "center of excellence" for cybersecurity management, continuous improvement and optimization of security solutions and processes.
  • ● Support the commissions or the preparation, implementation and validating of cybersecurity policies, standards, procedures and guidelines.
  • ● Lead and support the continuous ISO27001 compliance and certification.
  • ● Lead and support the design and operation of related compliance monitoring and improvement activities to ensure compliance with ISO27001 practices, internal security policies and applicable laws and regulations.
  • ● Support security awareness, training and educational activities by providing suitable guidance to the team and stakeholders.
  • ● Lead or commission information security risk assessments, including vendor risk assessments, contract reviews, and controls selection activities.
  • ● Support the information security incident investigation and management process and post incident review from IT GRC standpoint.
  • ● Keep abreast of latest security and privacy legislation, regulations, adversaries, alerts, and vulnerabilities.
  • ● Support IT GRC on global data privacy practices.

Requirements

  • ● Bachelor's degree in Computing/Information Technology or equivalent.
  • ● At least 8 years' experience in similar role with at least 3 years in management position.
  • ● Excellent knowledge on IT governance framework, practices, policy management, risk management and IT GRC tools.
  • ● Knowledge on IT environment and solutions such as Windows/Linux OSes, AD, cloud technology, DNS, DHCP, IPS, AV, Firewalls, Routers, Switches, VM, etc will be advantageous.
  • ● Sense of ownership and pro activeness to identify, improve and optimize processes and mitigating gaps.
  • ● Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk related concepts to technical and non technical stakeholders.
  • ● Strong ability to work independently and collaborate with diverse teams with multiple stakeholders.