Information Security Officer (ISO)

The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) implementation and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards at PSI INCONTROL SDN BHD .

The role focuses on information security governance, risk management, compliance, and audit readiness , ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization. The person works closely with the team of the CISO from PSI Software, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

Primary Job Functions:

• Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001 as per the group requirements. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.
• Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements
• Conduct information security risk assessments, maintain the risk register, and track mitigation actions
• Coordinate and support internal audits, external ISO certification audits
• Ensure audit remediation activities including tracking and reporting on progress and blockers
• Develop, review, and maintain information security procedures, standards, and documentation
• Monitor and report on information security risks, incidents, and control effectiveness
• Assess the impact of system changes and new technologies on information security posture
• Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions
• Work with ICT teams to ensure appropriate technical and administrative security controls are in place
• Drive security awareness and training initiatives for employees
• Act as the point of contact for all information security-related matters within the organization

Required Attitude:

• Strong analytical and problem-solving mindset with attention to detail
• High level of integrity and accountability in handling sensitive information
• Strong coordination, communication and stakeholder engagement skills
• Ability to work independently while coordinating across departments
• Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

• Strong understanding of Information Security principles and controls
• Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements
• Familiarity with risk assessment methodologies and audit processes
• Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

• Experience in ISMS implementation, maintenance, and audit coordination
• Ability to develop and maintain policies, procedures, and security documentation
• Strong technical understanding of IT infrastructure, networks, and security attacks and controls
• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Education:

Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent

Experience:

3–5 years relevant professional Information Security experience.

Work Status:

Full-time, 2 years contract

Travel:

Moderate travel may be required.