[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All CIMB Group Holdings jobs](https://jobs.opennash.com/companies/cimb-group-holdings/) · [Search jobs](/search/)

CIMB Group Holdings · Malaysia

# Manager, GR NFRM TRM - Cybersecurity Risk Management

Malaysia Full-time Manager or lead Security 

Listed on CIMB Group Holdings’s official careers site. Posted October 23, 2026. Check that it is still open and apply there.
[Apply on CIMB Group Holdings’s careers site →](https://ejox.fa.ap1.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/37846)

[OpenNash Jobs](https://jobs.opennash.com/) / [CIMB Group Holdings](https://jobs.opennash.com/companies/cimb-group-holdings/) / Manager, GR NFRM TRM - Cybersecurity Risk Management

## Job description

### Key Responsibilities

Support the implementation of compliance with the Operational Risk Management Framework (ORMF), Technology Risk Framework (TRMF), Cyber Resilience Framework (CRF), Cloud Risk Management Framework (CRMF), Emerging Technology Risk Framework (ETRF), AI/ML Risk Framework and P&P, Technology Risk Appetite Statement (TRAS) and BNM Risk Management in Technologies (RMiT) to effectively manage technology related risks, enhance technology resiliency and mitigate risks against technology threats across CIMB Group.

Independently review and challenge control issues raised by the First Line of Defense (1LoD) to ensure accurate issue identification, root cause analysis, impact assessment, and issue rating. Assess the adequacy, completeness, and feasibility of remediation plans and closure evidence. Review issue resolution timelines and challenge unreasonable or unsupported target dates. Monitor aged, overdue, and high-risk control issues and escalate material concerns to relevant governance committees.

Independently assess Control Issue Acceptance requests submitted by business units. Verify that all feasible remediation alternatives have been adequately evaluated before risk acceptance is considered. Work closely with Business Unit Control Officer (RCO) &/or DCORO to address key technology risks, controls and events, as part of existing Business Unit RCSA. Facilitate in preparing the Technology Risk Dashboard with objective to have one view of Risk Posture Major incident management review (Review LED) & BDSF Management and monitoring of Technology Key Risk Indicator and Technology Risk Appetite Statement (RAS) Risk hotspot – to highlight immediate key risks area to watch (Immediate, High, Medium and Low) pertaining to Technology, Cyber, IT in 3rd Parties, AI and Cloud.

IT 3rd Parties Risk Management support Job Specification Roll-out and enforce and TRMF, P&P and RMiT Validate effectiveness of security controls
- Provide assurance on technology risk
- Conduct independent risk assessment
- Review and challenge 1LOD risk assessment

## At a glance
- Posted by the employer: Oct 23, 2026
- First seen by OpenNash: Oct 30, 2026
- Last checked: Oct 30, 2026
- Listed for: 7 days
- Location: Malaysia
- Employment type: Full-time[Apply on CIMB Group Holdings’s careers site →](https://ejox.fa.ap1.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/37846)

## Hiring at CIMB Group Holdings
- Open jobs: 407
- New in the last 7 days: After two weekly collections
- Tracked since: Oct 30, 2026

[All CIMB Group Holdings jobs](https://jobs.opennash.com/companies/cimb-group-holdings/) · [Weekly hiring report](/reports/hiring/)

## More jobs at CIMB Group Holdings

### [Vice President, GR NFRM TRM - Cybersecurity Risk Management](https://jobs.opennash.com/companies/cimb-group-holdings/jobs/07b8f9c5add8e647bd62/)

Malaysia

### [AML Officer, GC - AMLT, ODD/CDD (SG) MY](https://jobs.opennash.com/companies/cimb-group-holdings/jobs/94651e0f40238e4abb0b/)

Malaysia

### [AVP, Credit Risk - Credit Management - Commercial MY](https://jobs.opennash.com/companies/cimb-group-holdings/jobs/468fcc840240a7af977c/)

Malaysia

### [Assistant Manager, CBPA - Securitization & Expense Management MY](https://jobs.opennash.com/companies/cimb-group-holdings/jobs/6124777deb11c7bcf08f/)

Malaysia

### [Assistant Manager, Consumer Digital - Digital Business Strategy & Transformation (Operations & Process)](https://jobs.opennash.com/companies/cimb-group-holdings/jobs/2e6c3cd3b6e3804eb79c/)

Malaysia

## Similar jobs at other companies

### [SAP TRM -Treasury and Risk Management](https://jobs.opennash.com/companies/tata-consultancy-services/jobs/68f87e178536f9d0d005/)

Tata Consultancy Services · Kolkata

### [Third-Party Cybersecurity Risk Analyst](https://jobs.opennash.com/companies/bouygues/jobs/8917d85e3c3883c33b3c/)

Bouygues · Romania

### [Consultor/a SAP FI TRM](https://jobs.opennash.com/companies/ntt/jobs/a0a1ec31ed82a9f74b61/)

NTT · Buenos Aires, Argentina

### [Industrial Cybersecurity Risk Analyst](https://jobs.opennash.com/companies/siemens-energy/jobs/254e3fd8ae80bc628fcb/)

Siemens Energy · Bucharest, Romania

### [Consultores SAP FI-CO-TRM (S/4HANA)](https://jobs.opennash.com/companies/accenture/jobs/89d6ae639ffed8894f8c/)

Accenture 

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)