{"id":1903242,"url":"https://alion.io/job/bjak-chief-information-security-officer","title":"Chief Information Security Officer","company":{"id":12599,"name":"Bjak","domain":"bjak.my","url":"https://alion.io/company/bjak","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":82,"ghost_share":0,"stale_share":0.878,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Petaling Jaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":56000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":269},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-09-03T02:15:54Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T06:18:55Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"About Doit\nWe are focused on reinventing how people spend, save, invest, exchange, travel, and more. Our objective is to build tools that will help people get more from their money and and become an expert at ease. We believe AI will help make finance smart, assessible and safe.\nWe are looking for the most talented and driven people we can find. We are looking for people who work for their passion, not counting hours. Who loves building great next-generation products, not status quo. Who cares about redefining how everyone around us can get the best financial applications, not for an exclusive few. We have teams working around the world, with over 20 nationalities and growing from our offices and remotely. Join us and build a better future for our society.\nIn 2019, we built the first mobile-first, insurance platform, enabling insurance to be accessible online by millions in the region. Today, it's the leading insurance platform in Southeast Asia.\nAbout the Role\nThe CISO will own information security and technology risk for doit Holdings, our regulated investment platform in Malaysia, and will be the person the board names as responsible for technology risk under the Securities Commission's Guidelines on Technology Risk Management. Nothing exists yet. The framework, the controls, the monitoring and the evidence all have to be built, and they have to hold up to an independent assessment before the platform can be registered.\nWhat you will be doing\nHold the board-appointed responsibility for day-to-day technology risk oversight and for delivering the board's cyber security strategy.\n\nBuild the technology risk and cyber security frameworks, the risk appetite statement and the policy set beneath them, and keep them approved and current.\n\nRun security operations across monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development.\n\nOwn incident response from detection through recovery, including the report to the SC on the day an incident occurs.\n\nTake the platform through the independent technology validation that gates registration, and close what it finds.\n\nTake ISO/IEC 27001 from scoping through to certification.\n\nDeliver the annual cyber security awareness programme across the board, senior management and staff.\n\nWhat you will need\nDeep information security background, with at least 8 years in the field including 5 in financial services or another regulated sector.\n\nAt least one of CISSP, CISM or CISA. This is a requirement. These are the certifications the SC names as acceptable for the external party who assesses technology risk controls, and the officer who owns those controls should not sit below the standard set for the officer who audits them.\n\nDeep command of the SC's Guidelines on Technology Risk Management, operationalised rather than restated.\n\nReal depth in cyber security, operational resilience, and cloud and third-party risk.\n\nISO/IEC 27001 implementation experience through to certification.\n\nA degree in computer science, information technology, information security or a cognate discipline, and able to meet the SC's fit and proper criteria.\n\nISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC or CCSP, or experience of an SC or BNM technology examination, is useful.\n\nHands-on operating style. Able to review the controls, run the simulation and close the gaps personally.\n\nLocation\nThis is a hybrid role. You are expected to work from our local office at least 3 days per week, with the remaining days offering flexibility to work remotely.\nCandidates should be based in, or able to work from, the location where the role is advertised.\nLanguage\nEnglish is our main working language across global teams. Strong English communication is required.\nInterview Process\nOur process is designed to move fast:\n1. Introductory conversation\n2. Technical and regulatory deep dive\n3. CEO / final round\nFor strong candidates, we aim to complete the process and make an offer within 1 week from the start of the interview process. Candidates who complete assessments quickly will be prioritized.","description_format":"text","description_chars":4108,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Malaysia","iso":"MY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","InsurTech","Financial Comparison & Loan Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-05T11:59:25Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.308,"p_room":0.28,"age_days":50,"expected_fill_days":9,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/bjak-chief-information-security-officer","json_url":"https://alion.io/job/bjak-chief-information-security-officer.json","meta":{"generated_at":"2026-10-23T08:25:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13508,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12599},"rest":"https://alion.io/mcp/rest/get_company?id=12599"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbjak-chief-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbjak-chief-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbjak-chief-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bjak-chief-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbjak-chief-information-security-officer"}]}