INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE)

Digital

MYR3,000-MYR4,500/ month

Located at Bukit Jelutong

Full TimeRole

Job Description

What you will do as an INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE)?

About the Job

To support the implementation and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 and IT General Controls (ITGC). The role focuses on information security governance, risk assessment, awareness activity, control monitoring, audit readiness, documentation and coordination with relevant departments to ensure compliance with established security requirements and procedures.

Qualifications

• Bachelor's degree in Information Technology.
• 3–5 years of relevant working experience in IT, cybersecurity, information security, IT governance, risk and compliance, or related fields.
• Good understanding of IT infrastructure, technology environments and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements.
• Familiarity with risk assessment, internal audit, security controls and compliance monitoring.

Responsibilities

• Support the Lead Implementer in executing approved initiatives, implementation plans and roadmaps.
• Assist in conducting information security risk assessments, identifying control gaps and recommending risk mitigation measures.
• Monitor compliance with established security policies, SOPs and ISMS control requirements.
• Support internal audits, compliance reviews and the preparation and verification of audit evidence.
• Assist in developing and maintaining ISMS documentation, risk registers, control records and implementation trackers.
• Coordinate with relevant departments to follow up on outstanding actions, audit findings and control deficiencies.
• Apply knowledge of IT infrastructure, technology and cybersecurity to support security control assessments and identify potential risks.
• Assist in developing information security awareness materials and interactive learning content through the organisation's L&D platform.
• Prepare progress updates and reports on ISMS implementation, risk status and compliance activities.
• Perform other related duties assigned by the HOU – Process, Control & Governance.

What we Offer

Outpatient Medical Coverage Inpatient Medical Insurance Staff Discount Staff Credit Facilities Special Leave