About the Role
Moomoo Malaysia is looking for an independent and proactive Head of Information Security to lead the company's local information security governance and regulatory compliance initiatives.
This is a hands-on individual contributor, the ideal candidate should be familiar with Malaysia's regulatory landscape, particularly within the capital markets and financial services industry, and be comfortable working in a fast-paced startup environment.
Responsibilites
- Act as the primary Information Security representative for Moomoo Malaysia.
- Coordinate and collaborate closely with the Global Security Center to ensure local regulatory requirements are implemented effectively.
- Serve as the main liaison with Malaysian regulators (e.g. Securities Commission Malaysia, Bursa Malaysia and other relevant authorities) on information security, cybersecurity, technology risk and other related matters.
- Ensure compliance with local regulatory requirements on Cybersecurity Frameworks, IT Security Standards, Regulatory Outsourcing Guidelines etc and internal global security policies and etc, including mandatory breach notification obligations.
- Support regulatory inspections, audits, thematic reviews, information security assessments and etc.
- Review, localize and implement information security policies, standards, and procedures in alignment with both global security requirements and Malaysian regulations.
- Coordinate internal stakeholders across Compliance, Legal, Risk, Technology, and Business teams on security-related matters.
- Monitor regulatory developments and provide recommendations on cybersecurity and information security best practices.
- Support incident response coordination and regulatory reporting for security incidents within prescribed timelines.
- Support local cyber resilience, DR/BCP testing activities.
- Deliver local security awareness training and programs required adapted from global materials etc
Requirements
- Bachelor's Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field.
- 5-8 years of relevant experience in Information Security, Cybersecurity, IT Risk, Technology Risk, or Information Security Governance.
- Familiar with Malaysian regulatory requirements relating to cybersecurity and information security, particularly from the Securities Commission Malaysia (SC) or other financial regulators.
- Experience within a brokerage firm, investment bank, capital markets, fintech, or financial services environment will be a strong advantage.
- Able to work independently with minimal supervision and manage multiple stakeholders across regional and global teams.
- Understanding of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, or equivalent.
- Experience supporting regulatory audits and examinations.
- Comfortable working in a dynamic, fast-paced startup environment.
- Strong communication and stakeholder management skills, with the ability to engage regulators, senior management, and regional teams effectively.
- Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent will be an added advantage.
- Language proficiency in English, Malay is a must; Chinese/Mandarin is highly advantageous given global team collaboration.
- Bumiputera candidates are encouraged to apply.
Benefits
We offer a comprehensive and holistic work experience and package as follows:
- 13 months contractual bonus
- Competitive compensation & benefits.
- Performance bonus
- Convenient Access to Public Transport
- Exam/Certification Sponsorship
- Career Development Opportunities in the Financial Services Industry
- Company Team Building & Bonding Activities
- Free-Flow Pantry Snacks & Drinks
- Dynamic, Multinational Working Environment
Please note that only short-listed candidates will be contacted. Thank you.
