JobCubby JobCubby
Sign up
Creador

Vice President - Cybersecurity

Creador Kuala Lumpur, Kuala Lumpur, Malaysia

Financial Services · 51-200 employees

4 h ago
security Principal (10+ yrs) Full-time Malaysia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves leading the cybersecurity program for Creador and providing independent, risk-based oversight of cybersecurity across all portfolio companies. Responsibilities include managing consultant pipelines, overseeing material cyber incidents, and reporting significant risks to the CEO and Investment Committee.

What they look for

Cybersecurity Strategy Risk Management Governance Incident Response DFIR Penetration Testing Threat Intelligence Project Management Cyber Audit Security Assurance Stakeholder Management Technical Leadership Policy Development Vendor Management Risk Assessment

Requirements

Candidates must have a bachelor's degree in a relevant field and at least 10 years of experience in cybersecurity, technology risk, or incident response. Strong project management skills, technical depth to challenge security teams, and excellent communication skills are essential for this leadership position.

Full description

Role Overview and Scope

Creador is seeking a dedicated cybersecurity lead to join BPIA and strengthen oversight across Creador and its portfolio. The role requires the technical depth to challenge consultants and portfolio cybersecurity teams, review evidence and independently assess material risks. The role leads Creador's own cybersecurity programme and provides independent, risk-based oversight of portfolio companies, working closely with Creador's investment teams and portfolio company management, who remain responsible for day-to-day cybersecurity operations. The role shall cover Creador as well as all portfolio companies across countries we are invested in. 

Key Responsibilities

1. Cybersecurity strategy and governance

  • Lead Creador's cybersecurity programme with Creador IT and service providers, covering policies, testing, monitoring, staff awareness and incident readiness.
  • Support periodic review of Creador's cybersecurity environment by an external party.

2. Independent Portfolio Oversight

  • Challenge cybersecurity assessments, consultants and management updates across all portfolio companies.
  • Review evidence supporting material remediation, and arrange independent validation or retesting where warranted.
  • Maintain a consolidated, risk-based view of cybersecurity risk across the portfolio.

3. Consultant Pipeline

  • Build and manage a regional pipeline of qualified cybersecurity consultants, including cyber audit, threat intelligence, penetration testing and DFIR retainers.
  • Prepare scopes of work, assess proposals and challenge consultant work that is generic, incomplete or impractical.

4. Incident Oversight

  • Support oversight of material cyber incidents and specialist DFIR engagements at Creador and portfolio companies.
  • Obtain timely incident updates and supporting evidence, while keeping the relevant investment team informed.

5. Escalation, reporting and initiatives

  • Escalate significant or unresolved risks to the CEO and Investment Committee, keeping the relevant investment team informed.
  • Report status, material incidents and root causes in clear business language.
  • Keep up to date on threats, regulations and new tools, and propose practical initiatives for CEO consideration,

Role Requirements

  • Bachelor's degree in cybersecurity, computer science, information systems or a related field, or equivalent experience.
  • Typically 10 or more years in cybersecurity, technology risk, cyber consulting, security assurance or incident response.
  • Technical depth to challenge consultants and IT/security teams, and to review technical evidence.
  • Experience managing cybersecurity consultants and supporting material incidents, including DFIR engagements.
  • Strong project management skills, with a track record of driving actions to completion across multiple companies.
  • Resourceful and current on threats and tools, with the confidence to propose new initiatives.
  • Independent judgment, integrity and discretion when handling sensitive information.
  • Excellent written and spoken English, able to explain technical issues to senior executives. 
  • Certifications such as CISSP, CISM, CRISC or GIAC are an advantage.
  • Willing to travel in the region and respond outside office hours during material incidents.

Similar roles