APAC ISMS & Compliance Lead (ISO 27001)

MEDIAMONKS MALAYSIA SDN. BHD.; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

MEDIAMONKS MALAYSIA SDN. BHD.

is seeking an Information Security Compliance Analyst to safeguard data, enforce regulations, and strengthen our security posture across APAC in collaboration with the Global Infosec Team. You will conduct risk assessments, manage client requirements, and ensure compliance with ISO27001:2022, SOC2, and NIST-800 while coordinating with vendors and internal stakeholders to implement effective controls.

Qualifications

• Bachelor's degree in Computer Science, Computer or Systems Engineering or equivalent.
• Minimum of 5 years of experience in InfoSec related positions.
• Solid knowledge of security on networking, cloud, infrastructure configuration, end‑point protection and SDLC.
• Knowledge of ISO 27001/2, SOC2, NIST-800.
• Professional working proficiency in written and spoken English.
• Ability to confidently present findings to those with either a technical or non-technical background.
• Self-directed, resourceful, and a critical thinker with attention‑to‑detail and proactive problem‑solving skills.
• Ability to self-organize and plan activities with commitment towards results.
• Ready to learn new contents both from others or self‑learned.
• Looking forward to self-improvement and suggesting improvements to processes or activities.

Responsibilities

• Lead the alignment to the global ISMS (based on ISO27001:2022) over the APAC region.
• Integrate the compliance efforts in the region with the global roadmap.
• Perform routine activities to evaluate compliance with security frameworks and legislation.
• Report the compliance status of processes and technology in the region.
• Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company's operations.
• Define security measures to lower the risks identified.
• Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end‑point protection, physical security, third party risk assessment, organization security and legal compliance.
• Coordinate the information security assessments with 3rd parties (clients, suppliers).
• Contribute in the development of awareness material and the process of delivery and measurement.
• Coordinate and reply to internal and external audits related to information security.
• Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end‑point protection, network security, security and vulnerabilities assessment).
• Empower, assist, and mentor fellow members of the team to foster their professional growth and ensure collective success.

Education

Bachelor's degree in Computer Science, Computer or Systems Engineering or equivalent

Job description

MEDIAMONKS MALAYSIA SDN. BHD.

is seeking an Information Security Compliance Analyst to safeguard data, enforce regulations, and strengthen our security posture across APAC in collaboration with the Global Infosec Team. You will conduct risk assessments, manage client requirements, and ensure compliance with ISO27001:2022, SOC2, and NIST-800 while coordinating with vendors and internal stakeholders to implement effective controls.