Analyst/Senior Analyst - Group IT Cybersecurity & Risk Management

QL Corporate Services Sdn Bhd; Shah Alam; On-site; MYR 60,000 - 80,000; Full time

Job summary

A multinational corporation is seeking a Cybersecurity Analyst/Senior Analyst to support risk management and compliance initiatives. The role involves identifying technology risks, supporting incident response, and ensuring adherence to security frameworks. The ideal candidate holds a related degree and has hands-on experience with GRC tools. Competitive salary and benefits are offered.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or Risk Management preferred.
• Knowledge of information security principles and regulatory requirements is advantageous.
• Progressive working experience with cybersecurity frameworks.

Responsibilities

• Identify and document technology risks across IT systems.
• Assist in maintaining the IT Risk Register.
• Support vulnerability management efforts and incident response.

Skills

Knowledge of security frameworks (e.g., COBIT, ISF, COSO)

Strong understanding of risk management processes

Hands-on experience with GRC tools

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems

Tools

GRC tools (e.g., Archer, Managed Engine, ServiceNow GRC)

Job description

Analyst/Senior Analyst - Group IT Cybersecurity & Risk Management

We’re seeking a Cybersecurity Analyst to support IT and cybersecurity risk initiatives, ensure compliance with relevant frameworks, and strengthen cyber resilience through risk assessments and business continuity planning.

Job Scope

• Identify, document, and track technology risks, vulnerabilities, and control deficiencies across IT systems and business units.
• Assist in maintaining the IT Risk Register and ensuring appropriate remediation and risk treatment plans are implemented.
• Monitor key risk indicators (KRIs) and metrics to support continuous risk visibility and reporting to management.

Cybersecurity Operations Support

• Assist Incident Response teams to analyze incidents and integrate lessons learned into risk mitigation strategies.
• Support vulnerability management efforts by correlating threat data, patch status, and asset criticality.
• Contribute to operational reviews of cybersecurity events, ensuring appropriate escalation and reporting.
• Support security control validation for cloud, endpoint, network, and identity management systems.

Governance, Compliance & Assurance

• Maintain documentation to support internal and external audit requests.
• Assist in developing, updating, and enforcing security policies, procedures, and standards.

Job Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Risk Management or specialized certifications preferred.
• Knowledge of security frameworks (e.g., COBIT, ISF, COSO) and standards (e.g., ISO, NIST), information security principles, security architecture and regulatory requirements will have added advantage.
• Progressive working experience with strong understanding of risk management processes, cybersecurity frameworks and operational control testing.
• Hands‑on experience with GRC tools (e.g., Archer, Managed Engine, ServiceNow GRC, OneTrust, MetricStream, or LogicGate).
• Exposure to enterprise environments (cloud, hybrid, or on‑premises) and regulatory compliance frameworks.

QL Corporate Services Sdn Bhd is a member of QL Resources Berhad. QL Resources is a sustainable and scalable multinational agro‑food corporation that farms and produces some of the most resource‑efficient protein and food energy sources with a market capitalisation of RM14.36 billion and revenue of RM 6.65 billion in FY2024. The Group has four business pillars – Integrated Livestock Farming, Marine Products Manufacturing, Palm Oil and Clean Energy, and Convenience Store Chain – and operates in Malaysia, Indonesia, Vietnam and China. QL remained resolute in our promise of delivering sustainable value to stakeholders.