Security Engineer

Security Engineer (Technology Risk Governance) | Kuala Lumpur | 12-Month Contract

About Farben
Farben Information Technology is a technology services and talent solutions company that places skilled IT professionals with leading organizations across Asia. We work closely with our clients and candidates to deliver strong long-term matches and a smooth hiring experience.

About Our Client
Our client is a leading regional insurance and financial services group with a large technology organization. They are looking for a Security Engineer to join their Technology Risk Governance and Control team on a 12-month contract. This is a fully onsite role in Kuala Lumpur.

Responsibilities

• Maintain the technology risk governance framework and support the achievement of relevant certifications
• Support compliance activities with Bank Negara Malaysia’s RMiT policy and other regulatory requirements
• Contribute to the development and review of IT and cybersecurity risk appetite statements and governance strategies
• Provide governance and controls oversight for technology and cybersecurity issues and risks
• Lead and execute periodic control assessments and risk assessments across critical technology and cybersecurity domains
• Document, track, and report on risk assessment findings and communicate risk exposure and recommended actions to stakeholders
• Act as primary risk manager for open risk issues, tracking commitments and driving timely remediation by risk owners
• Prepare and report key risk metrics for management review
• Assist with internal and external audits and track audit findings through to closure
• Conduct third-party security risk assessments and support supply chain security risk management
• Monitor external threat intelligence and escalate emerging risks
• Review, maintain, and publish information security policies, standards, and procedures, and monitor IT compliance with them

Must-Haves

• At least 8 years of relevant experience managing information and cybersecurity risks
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or a related field, or equivalent experience
• Direct experience engaging and interacting with the financial regulator (BNM)
• In-depth understanding of business risk, IT governance, enterprise risk management, information security, and local regulatory compliance
• Excellent verbal and written English, with the ability to communicate with both technical and non-technical senior audiences
• Strong analytical mindset and attention to detail, with the ability to turn information from multiple sources into clear risk conclusions
• Ability to work independently with little supervision, and as part of a team
• Willingness to work onsite in Kuala Lumpur for the full contract

Nice-to-Haves

• Experience in the financial industry, ideally insurance
• Industry certifications such as CISSP, CISA, CISM, CRISC, or CGEIT
• Solid understanding of operations and technology, including cloud
• Understanding of the insurance business domain and its critical success factors
• Experience with third-party risk assessments and policy development

Role Details

• Location: Kuala Lumpur (fully onsite)
• Contract: 12 months
• Salary: RM7,000 to RM10,000 per month, depending on years of experience and skills
• Target start: November 2026

Benefits

• EPF, SOCSO, and EIS contributions
• Medical insurance
• Annual leave and sick leave
• Public holiday overtime

Hiring Process

1. Submit your application and updated CV through JobStreet
2. Initial screening with a Farben recruiter
3. Farben internal interview
4. Onsite client interview in Kuala Lumpur
5. Background check and offer