INFORMATION SECURITY OFFICER

Responsible to: CISO PSI Software

Relationship: Works closely with the team of the CISO from PSI Software, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

General Description: The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) implementation and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards at PSI INCONTROL SDN BHD.

The role focuses on information security governance, risk management, compliance, and audit readiness, ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization.

Primary Job Functions:

·       Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001 as per the group requirements. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.

·       Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements

·       Conduct information security risk assessments, maintain the risk register, and track mitigation actions

·       Coordinate and support internal audits, external ISO certification audits

·       Ensure audit remediation activities including tracking and reporting on progress and blockers

·       Develop, review, and maintain information security procedures, standards, and documentation

·       Monitor and report on information security risks, incidents, and control effectiveness

·       Assess the impact of system changes and new technologies on information security posture

·       Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions

·       Work with ICT teams to ensure appropriate technical and administrative security controls are in place

·       Drive security awareness and training initiatives for employees

·       Act as the point of contact for all information security-related matters within the organization

Required Attitude:

·       Strong analytical and problem-solving mindset with attention to detail

·       High level of integrity and accountability in handling sensitive information

·       Strong coordination, communication and stakeholder engagement skills

·       Ability to work independently while coordinating across departments

·       Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

·       Strong understanding of Information Security principles and controls

·       Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements

·       Familiarity with risk assessment methodologies and audit processes

·       Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

·       Experience in ISMS implementation, maintenance, and audit coordination

·       Ability to develop and maintain policies, procedures, and security documentation

·       Strong technical understanding of IT infrastructure, networks, and security attacks and controls

·       Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Additional Desired Skills:

Education:

·       Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.

Experience:

·       3–5 years relevant professional Information Security experience.

Work Status:

·       Full-time

·       Permanent

Travel:

Moderate travel may be required.