{"id":18797,"date":"2026-09-03T13:15:37","date_gmt":"2026-09-03T05:15:37","guid":{"rendered":"https:\/\/peoplelake.asia\/?post_type=awsm_job_openings&#038;p=18797"},"modified":"2026-09-03T13:16:41","modified_gmt":"2026-09-03T05:16:41","slug":"security-assurance-reverse-tpsa-manager-1-year-contract-insurance-domain-exposure-is-a-must","status":"publish","type":"awsm_job_openings","link":"https:\/\/peoplelake.asia\/zh\/jobs\/security-assurance-reverse-tpsa-manager-1-year-contract-insurance-domain-exposure-is-a-must\/","title":{"rendered":"Security Assurance &amp; Reverse TPSA Manager &#8211; 1 year contract renewable (INSURANCE DOMAIN EXPOSURE IS A MUST)"},"content":{"rendered":"<h2 class=\"wp-block-heading\">About the company: <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A reputable insurance and financial services provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Role Purpose:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Act as the central point of contact for all\u00a0<strong>client security due diligence<\/strong>\u00a0activities. <strong>Manage end-to-end responses to Third-Party Security Assessments (TPSAs), Requests for Security Information (RFSIs), client audits, and cybersecurity questionnaires<\/strong>. Partner with Information Security, Legal, Privacy, Compliance, and Business Units to articulate the company&#8217;s security posture while protecting confidential information. This role is critical to\u00a0<strong>enabling business growth, building client trust, and demonstrating regulatory compliance<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key Responsibilities:<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Reverse TPSA &amp; Client Assurance<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Lead and coordinate all client security assessment requests from receipt to closure.<\/strong><\/li>\n\n\n\n<li><strong>Review, complete, and track security questionnaires covering cybersecurity, cloud security, data protection, operational resilience, BCP, and regulatory compliance.<\/strong><\/li>\n\n\n\n<li><strong>Represent the company in client discussions, workshops, and security review meetings.<\/strong><\/li>\n\n\n\n<li>Translate technical controls into clear, business-friendly language for non-technical stakeholders.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Stakeholder &amp; Evidence Management<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Collaborate with internal teams (InfoSec, Technology, Legal, Privacy, Compliance, Operational Risk, Corporate Solutions, TPRM) to gather evidence and validate controls.<\/li>\n\n\n\n<li>Maintain a centralized repository of standard TPSA responses, evidence packages, certifications, and compliance documentation.<\/li>\n\n\n\n<li>Ensure all externally shared information complies with classification and disclosure policies.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Regulatory &amp; Continuous Improvement<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Support responses aligned with\u00a0<strong>BNM RMiT, PDPA, ISO 27001, NIST, and Operational Resilience<\/strong>\u00a0requirements.<\/li>\n\n\n\n<li>Track TPSA performance metrics, identify recurring themes, and drive automation, standardization, and process improvements.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Requirements: <\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u6559\u80b2<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Bachelor&#8217;s Degree in Information Security, Cybersecurity, IT, Risk Management, Computer Science, or related field.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Experience <\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Information Security \/ Technology Risk<\/li>\n\n\n\n<li>Security Governance \/ Assurance<\/li>\n\n\n\n<li>IT Audit or Third-Party Risk Management<\/li>\n\n\n\n<li><strong>Customer-facing security assurance<\/strong>\u00a0roles<\/li>\n\n\n\n<li>Responding to\u00a0<strong>large enterprise TPSAs<\/strong>\u00a0(preferred)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Technical Knowledge<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Information Security Governance, Cybersecurity Risk Management, Cloud Security Controls<\/li>\n\n\n\n<li>Identity &amp; Access Management, Vulnerability Management, Incident Response<\/li>\n\n\n\n<li>Data Protection &amp; Privacy Controls, Business Continuity &amp; Disaster Recovery<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Frameworks &amp; Regulations<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ISO 27001, NIST CSF, SOC Reports, CIS Controls<\/li>\n\n\n\n<li>BNM RMiT, PDPA Malaysia, Operational Resilience<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Preferred Certifications<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor\/Implementer, CCSP<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The salary for this position is up to RM 12,000.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kindly submit your application to sunny.khoo@peoplelake.asia<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please be informed that only shortlisted candidate will be notified.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>About the company: A reputable insurance and financial services provider. Role Purpose: Act as the central point of contact for all\u00a0client security due diligence\u00a0activities. Manage end-to-end responses to Third-Party Security Assessments (TPSAs), Requests for Security Information (RFSIs), client audits, and cybersecurity questionnaires. Partner with Information Security, Legal, Privacy, Compliance, and Business Units to articulate the [&hellip;]<\/p>","protected":false},"author":17,"featured_media":3301,"template":"","meta":[],"class_list":["post-18797","awsm_job_openings","type-awsm_job_openings","status-publish","has-post-thumbnail","hentry","job-category-cybersecurity","job-type-12-months-contract","job-location-bukit-jalil"],"_links":{"self":[{"href":"https:\/\/peoplelake.asia\/zh\/wp-json\/wp\/v2\/awsm_job_openings\/18797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/peoplelake.asia\/zh\/wp-json\/wp\/v2\/awsm_job_openings"}],"about":[{"href":"https:\/\/peoplelake.asia\/zh\/wp-json\/wp\/v2\/types\/awsm_job_openings"}],"author":[{"embeddable":true,"href":"https:\/\/peoplelake.asia\/zh\/wp-json\/wp\/v2\/users\/17"}],"wp:attachment":[{"href":"https:\/\/peoplelake.asia\/zh\/wp-json\/wp\/v2\/media?parent=18797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}