APAC IT Security & Compliance Lead

The Hoffman Agency; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

The Hoffman Agency in Malaysia is seeking a seasoned IT security leader to own governance, risk, and compliance programs, ensuring regulatory alignment across PDPA and regional laws. You will lead certification efforts, respond to client security questionnaires, and drive a security-aware culture across the organization.

You will collaborate with regional IT and executive teams, oversee tooling and vendor strategies, and act as a trusted advisor for secure technology adoption.

Qualifications

• Bachelor’s degree or above in Information Security, Computer Science, Information Technology, or related field.
• At least 4 years of experience in IT security, cybersecurity governance, or related role.
• Solid understanding of ISO 27001, NIST CSF, CIS Controls.
• Experience with risk assessments, audits, and compliance gap analyses.
• Familiarity with Microsoft 365 security and compliance tools (Defender, Intune, Azure AD).
• Experience responding to client security questionnaires and RFPs in a professional services context.
• Knowledge of endpoint protection and vulnerability management.
• Understanding data protection regulations across key regions (GPDR, CCPA, PDPA Singapore, PIPL, etc.)
• Strong English communications; additional Chinese proficiency a plus.
• Relevant certifications such as CISSP, CISM, CompTIA Security+ are a plus.

Responsibilities

• Own security governance and policy management lifecycle, updating PDPA and regional privacy-related documents.
• Lead certifications efforts (ISO 27001, SOC 2, Cyber Essentials) with external auditors.
• Respond to client security questionnaires, RFPs, and due diligence requests.
• Conduct annual information security risk assessments across Microsoft 365, endpoints, and third-party integrations.
• Develop and deliver annual security awareness training via HAcademy.
• Monitor vulnerability alerts and coordinate patching with IT teams.
• Evaluate and manage cybersecurity tools, vendors, and procurement decisions with the Regional IT Director.
• Provide backup IT support, including Microsoft 365 administration during peak periods.
• Advise on hosting company website security and related IT needs.

Skills

Security governance

Risk assessment

Policy management

Security awareness training

Security communication

Education

Bachelor’s degree in Information Security/CS/IT

Tools

Microsoft Defender

Sophos

BitLocker

Microsoft Intune

Azure AD / Entra ID

Job description

The Hoffman Agency in Malaysia is seeking a seasoned IT security leader to own governance, risk, and compliance programs, ensuring regulatory alignment across PDPA and regional laws. You will lead certification efforts, respond to client security questionnaires, and drive a security-aware culture across the organization.

You will collaborate with regional IT and executive teams, oversee tooling and vendor strategies, and act as a trusted advisor for secure technology adoption.