Head of Information Security

Job description

# Head of Information Security > moomoo · Kuala Lumpur, Malaysia · Full-time · Posted 2026-08-14 **Workplace:** on_site ## Description ### About the Role Moomoo Malaysia is looking for an independent and proactive Head of Information Security to lead the company's local information security governance and regulatory compliance initiatives. This is a hands-on individual contributor, the ideal candidate should be familiar with Malaysia's regulatory landscape, particularly within the capital markets and financial services industry, and be comfortable working in a fast-paced startup environment. ### Responsibilites - Act as the primary Information Security representative for Moomoo Malaysia. - Coordinate and collaborate closely with the Global Security Center to ensure local regulatory requirements are implemented effectively. - Serve as the main liaison with Malaysian regulators (e.g. Securities Commission Malaysia, Bursa Malaysia and other relevant authorities) on information security, cybersecurity, technology risk and other related matters. - Ensure compliance with local regulatory requirements on Cybersecurity Frameworks, IT Security Standards, Regulatory Outsourcing Guidelines etc and internal global security policies and etc, including mandatory breach notification obligations. - Support regulatory inspections, audits, thematic reviews, information security assessments and etc. - Review, localize and implement information security policies, standards, and procedures in alignment with both global security requirements and Malaysian regulations. - Coordinate internal stakeholders across Compliance, Legal, Risk, Technology, and Business teams on security-related matters. - Monitor regulatory developments and provide recommendations on cybersecurity and information security best practices. - Support incident response coordination and regulatory reporting for security incidents within prescribed timelines. - Support local cyber resilience, DR/BCP testing activities. - Deliver local security awareness training and programs required adapted from global materials etc ## Requirements - Bachelor's Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field. - 5-8 years of relevant experience in Information Security, Cybersecurity, IT Risk, Technology Risk, or Information Security Governance. - Familiar with Malaysian regulatory requirements relating to cybersecurity and information security, particularly from the Securities Commission Malaysia (SC) or other financial regulators. - Experience within a brokerage firm, investment bank, capital markets, fintech, or financial services environment will be a strong advantage. - Able to work independently with minimal supervision and manage multiple stakeholders across regional and global teams. - Understanding of information security frameworks such as ISO 27001, NIST Cybersecurity Framework, or equivalent. - Experience supporting regulatory audits and examinations. - Comfortable working in a dynamic, fast-paced startup environment. - Strong communication and stakeholder management skills, with the ability to engage regulators, senior management, and regional teams effectively. - Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent will be an added advantage. - Language proficiency in English, Malay is a must; Chinese/Mandarin is highly advantageous given global team collaboration. - **Bumiputera candidates are encouraged to apply.** ## Benefits We offer a comprehensive and holistic work experience and package as follows: - **13 months contractual bonus** - **Competitive compensation & benefits.** - **Performance bonus** - **Convenient Access to Public Transport** - **Exam/Certification Sponsorship** - **Career Development Opportunities in the Financial Services Industry** - **Company Team Building & Bonding Activities** - **Free-Flow Pantry Snacks & Drinks** - **Dynamic, Multinational Working Environment** Please note that only short-listed candidates will be contacted. Thank you. ## Apply [Apply at moomoo](https://apply.workable.com/moomoo/j/BCFE88A65C/apply) --- Powered by [Workable](https://www.workable.com)