Third-Party Security Risk Manager

• Manage client TPSAs, security questionnaires, Requests for Security Information (RFSIs), and security audits from initiation to completion.
• Coordinate with internal stakeholders to gather, validate, and provide security evidence within agreed SLAs.
• Communicate company's cybersecurity controls, security posture, and compliance practices to clients and stakeholders.
• Maintain standardized responses, security documentation, certifications, and evidence repositories.
• Map client requirements against security controls, identify gaps, and coordinate remediation actions.
• Support compliance with BNM RMiT, Malaysia PDPA, ISO 27001, NIST CSF, and AIA security standards.
• Track assessment metrics, turnaround times, and drive continuous process improvements.
• 3-7 years of experience in Cybersecurity, Technology Risk, IT Governance, IT Audit, or Third-Party Risk Management.
• Strong knowledge of security frameworks and regulations, including ISO 27001, NIST CSF, BNM RMiT, and PDPA.
• Excellent stakeholder management, communication, and documentation skills.
• Ability to explain technical security concepts to both technical and non-technical audiences.

Job Type: Contract

Pay: Up to RM15,000.00 per month

Benefits:

• Health insurance
• Opportunities for promotion
• Professional development

Work Location: In person