Analyst/Senior Analyst - Group IT Cybersecurity & Risk Management

QL Corporate Services Sdn Bhd; Selangor; On-site; MYR 60,000 - 90,000; Full time

Job summary

A leading corporate services company in Malaysia seeks a Cybersecurity Analyst to support risk initiatives, ensure compliance, and strengthen cyber resilience. Responsibilities include identifying technology risks, documenting control deficiencies, and assisting Incident Response teams. The ideal candidate holds a relevant degree and has experience with GRC tools and understanding of cybersecurity frameworks. This role offers the opportunity to enhance organizational cyber defense capabilities.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Risk Management or specialized certifications preferred.
• Knowledge of security frameworks (e.g., COBIT, ISF, COSO) and standards (e.g., ISO, NIST).
• Progressive working experience with a strong understanding of risk management processes.

Responsibilities

• Identify, document, and track technology risks across IT systems.
• Assist in maintaining the IT Risk Register and ensure remediation plans.
• Support Incident Response teams and analyze incidents.

Skills

Cybersecurity frameworks

Risk management processes

Incident response

Documentation skills

Vulnerability management

Education

Bachelor’s degree in Cybersecurity or related fields

Tools

GRC tools (e.g., Archer, ServiceNow GRC)

Job description

Analyst/Senior Analyst - Group IT Cybersecurity & Risk Management

We’re seeking a Cybersecurity Analyst to support IT and cybersecurity risk initiatives, ensure compliance with relevant frameworks, and strengthen cyber resilience through risk assessments and business continuity planning.

Job Scope

Identify, document, and track technology risks, vulnerabilities, and control deficiencies across IT systems and business units.

Assist in maintaining the IT Risk Register and ensuring appropriate remediation and risk treatment plans are implemented.

Monitor key risk indicators (KRIs) and metrics to support continuous risk visibility and reporting to management.

Cybersecurity Operations Support

Assist Incident Response teams to analyze incidents and integrate lessons learned into risk mitigation strategies.

Support vulnerability management efforts by correlating threat data, patch status, and asset criticality.

Contribute to operational reviews of cybersecurity events, ensuring appropriate escalation and reporting.

Support security control validation for cloud, endpoint, network, and identity management systems.

Governance, Compliance & Assurance

Maintain documentation to support internal and external audit requests.

Assist in developing, updating, and enforcing security policies, procedures, and standards.

Job Requirement

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Risk Management or specialized certifications preferred.

Knowledge of security frameworks (e.g., COBIT, ISF, COSO) and standards (e.g., ISO, NIST), information security principles, security architecture and regulatory requirements will have added advantage.

Progressive working experience with strong understanding of risk management processes, cybersecurity frameworks and operational control testing.

Hands-on experience with GRC tools (e.g., Archer, Managed Engine, ServiceNow GRC, OneTrust, MetricStream or LogicGate).

Exposure to enterprise environments (cloud, hybrid, or on-premises) and regulatory compliance frameworks.