Information Security GRC Analyst (Bateriku.com)

• To support the implementation and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 and IT General Controls (ITGC). The role focuses on information security governance, risk assessment, awareness activity, control monitoring, audit readiness, documentation and coordination with relevant departments to ensure compliance with established security requirements and procedures.
• Support the Lead Implementer in executing approved initiatives, implementation plans and roadmaps.
• Assist in conducting information security risk assessments, identifying control gaps and recommending risk mitigation measures.
• Monitor compliance with established security policies, SOPs and ISMS control requirements.
• Support internal audits, compliance reviews and the preparation and verification of audit evidence. Assist in developing and maintaining ISMS documentation, risk registers, control records and implementation trackers.
• Coordinate with relevant departments to follow up on outstanding actions, audit findings and control deficiencies.
• Apply knowledge of IT infrastructure, technology and cybersecurity to support security control assessments and identify potential risks. Assist in developing information security awareness materials and interactive learning content through the organisation's L&D platform.
• Prepare progress updates and reports on ISMS implementation, risk status and compliance activities.
• Perform other related duties assigned by the HOU – Process, Control & Governance.

Education and experiences:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related field.
• 3–5 years of relevant working experience in IT, cybersecurity, information security, IT governance, risk and compliance, or related fields.
• Good understanding of IT infrastructure, technology environments and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements. Familiarity with risk assessment, internal audit, security controls and compliance monitoring.
• ISO/IEC 27001 Internal Auditor, Lead Implementer or other relevant certifications will be an added advantage.

Pay: RM3,000.00 - RM4,500.00 per month

Benefits:

• Free parking
• Health insurance
• Maternity leave
• Opportunities for promotion
• Professional development

Work Location: In person