APAC IT Security & Compliance Manager

Hoffman Agency; Malaysia; On-site; MYR 200,000 - 280,000; Full time

Benefits offered by this job

Four-week sabbatical after four years

Competitive salary and benefits

Career growth opportunities

Job summary

Hoffman Agency is seeking a seasoned IT Security Lead in Malaysia to govern security policy, conduct risk assessments, and manage audits. You will respond to client security questionnaires and RFPs, coordinate with external auditors, and drive remediation while mentoring staff in security best practices.

The role requires 4+ years in IT security, familiarity with ISO 27001/NIST CSF, and strong English communication. A four-week sabbatical after four years is among offered benefits.

Qualifications

• Bachelor's degree in a relevant field
• At least 4 years in IT security governance or related role
• Knowledge of ISO 27001 / NIST CSF / CIS Controls
• Experience with risk assessments, audits and gap analyses
• Familiarity with Microsoft 365 security tools
• Experience responding to client security questionnaires and RFPs
• Knowledge of endpoint protection and vulnerability management
• Understanding data protection regulations across regions (GDPR/PDPA/CCPA)
• Strong English communication; additional language (Chinese) a plus

Responsibilities

• Own security policy lifecycle and keep documents up to date
• Lead security certifications with external auditors
• Respond to client security questionnaires and RFPs
• Plan and conduct annual information security risk assessments
• Design and deliver security awareness training for staff
• Monitor vulnerabilities and coordinate incident response
• Evaluate and integrate security tools with IT ecosystem
• Provide backup support for IT operations during peak periods

Skills

Security governance

Risk assessment

Security audits

Client security questionnaires

Endpoint protection

English communication

Additional language (Chinese)

Cloud security (M365)

Education

Bachelor's degree in Information Security / IT

ISO 27001 Lead Implementer/Auditor

CISSP, CISM, CompTIA Security+ or equivalent

Tools

Microsoft Defender for Office 365

Azure AD / Entra ID

Intune

Job description

Hoffman Agency is seeking a seasoned IT Security Lead in Malaysia to govern security policy, conduct risk assessments, and manage audits. You will respond to client security questionnaires and RFPs, coordinate with external auditors, and drive remediation while mentoring staff in security best practices.

The role requires 4+ years in IT security, familiarity with ISO 27001/NIST CSF, and strong English communication. A four-week sabbatical after four years is among offered benefits.