Chief Information Security Officer

About this role

About Doit

We are focused on reinventing how people spend, save, invest, exchange, travel, and more. Our objective is to build tools that will help people get more from their money and and become an expert at ease. We believe AI will help make finance smart, assessible and safe.

We are looking for the most talented and driven people we can find. We are looking for people who work for their passion, not counting hours. Who loves building great next-generation products, not status quo. Who cares about redefining how everyone around us can get the best financial applications, not for an exclusive few. We have teams working around the world, with over 20 nationalities and growing from our offices and remotely. Join us and build a better future for our society.

In 2019, we built the first mobile-first, insurance platform, enabling insurance to be accessible online by millions in the region. Today, it's the leading insurance platform in Southeast Asia.

ABOUT THE ROLE

The CISO will own information security and technology risk for doit Holdings, our regulated investment platform in Malaysia, and will be the person the board names as responsible for technology risk under the Securities Commission's Guidelines on Technology Risk Management. Nothing exists yet. The framework, the controls, the monitoring and the evidence all have to be built, and they have to hold up to an independent assessment before the platform can be registered.

WHAT YOU WILL BE DOING

• Hold the board-appointed responsibility for day-to-day technology risk oversight and for delivering the board's cyber security strategy.

• Build the technology risk and cyber security frameworks, the risk appetite statement and the policy set beneath them, and keep them approved and current.

• Run security operations across monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development.