Senior Manager, GRC (Group Application)
This pivotal role is designed for an experienced professional who thrives on ensuring robust compliance, governance, and risk management across a diverse portfolio of group applications, including SAP, HRIT, Investment IT, and more. The organisation offers a collaborative environment where your expertise in audit, data privacy, and information security will be valued and supported by knowledgeable colleagues.
What you'll do:
- Act as the primary champion for risk management, data privacy, and internal controls over financial reporting (ICFR) for all group application-related matters within the department.
- Oversee Information Technology General Controls (ITGC), Business Continuity Management (BCM), Third Party Security Assessment (TPSA), as well as training and education initiatives related to governance and compliance.
- Lead Application Portfolio Management (APM) activities for all group applications to ensure alignment with organisational policies and standards.
- Coordinate Financial Control Self-Assessment (FSCA) processes in accordance with group requirements while managing both internal and external audits as well as due diligence processes for local business units.
- Ensure timely completion of critical activities such as recertification exercises and disaster recovery planning by guiding your team through governance frameworks and process advisory.
- Collaborate closely with various internal stakeholders—including Group Risk, Group Information Security, Internal Audit teams—and respond promptly to audit queries by providing comprehensive evidence within agreed timelines.
- Conduct periodic gap assessments and reviews to identify areas for improvement in compliance posture; execute remediation plans to address any deficiencies identified.
- Stay informed about evolving regulatory requirements and emerging trends in IT security to proactively adapt departmental practices.
- Manage day-to-day business-as-usual operations according to established operational policies such as complexity matrices and guidance notes.
- Provide empathetic leadership, coordination, and administrative support to your assigned team members while participating in project-based activities that may require short-term travel or shift arrangements.
What you bring:
- Bachelor’s degree in Information Systems, System Audit or equivalent qualification is required for this position.
- A minimum of 10 years’ experience in regional solution or system support roles focused on governance, audit or IT risk management is essential.
- Demonstrated expertise within Centres of Excellence (COE), particularly in audit & controls functions across large-scale organisations.
- Proven track record managing teams of specialists within project or support environments where collaboration is key.
- Comprehensive understanding of SAP applications such as ECC, BI/BPC, SolMan, ARIBA or CONCUR is highly desirable but not mandatory.
- Relevant certifications such as ISACA’s CRISC, CGEIT or CISA are considered advantageous for this role.
- Experience coordinating financial control self-assessments (FSCA), audits (internal/external), and due diligence processes at both group and local levels is preferred.
- Strong interpersonal skills enabling effective communication with stakeholders at all levels including risk management teams, information security experts and auditors.
- Ability to stay current with changing regulatory landscapes as well as new developments in IT security trends is important for ongoing success.
- Willingness to participate in short-term travel or shift arrangements when required demonstrates flexibility.
What sets this company apart:
This organisation stands out for its unwavering commitment to building an inclusive workplace where every voice is heard.
Supportive leadership ensures that each team member receives the guidance they need while being trusted to take ownership of their responsibilities. With access to cutting-edge technology platforms and exposure to global best practices in digital transformation projects, you’ll find ample opportunities here for personal development within a dependable network of like-minded professionals who value empathy just as much as expertise.
What's next:
Apply today by clicking on the link provided; we look forward to connecting with talented individuals who share our passion for responsible innovation.
Do note that we will only be in touch if your application is shortlisted.
Agensi Pekerjaan Robert Walters Sdn Bhd
Business Registration Number : 729828-T
Licence Number : JTKSM 423C
About the job
Contract Type: Perm
Specialism: Tech & Transformation
Focus: Cyber Security & Information Security
Industry: IT
Salary: Negotiable
Workplace Type: Hybrid
Experience Level: Senior Management
Location: Kuala Lumpur
FULL_TIMEJob Reference: OUQ0BZ-02B39497
Date posted: 7 December 2025
Consultant: Kimberly Chan
kuala-lumpur tech-transformation/it-security 2025-12-07 2026-02-05 it Kuala Lumpur MY Robert Walters https://www.robertwalters.com.my https://www.robertwalters.com.my/content/dam/robert-walters/global/images/logos/web-logos/square-logo.png true