Associate, Cyber Security Governance, Risk & Compliance

LGMS Berhad; Subang Jaya; On-site; MYR 70,000 - 120,000; Full time

Job summary

LGMS Berhad in Malaysia seeks a cybersecurity professional to lead/assist Information Security audits and Risk Management, applying PCI DSS v4.0, ISO/IEC 27001:2022, NIST, Cobit, and related frameworks.

Responsibilities include auditing UNIX, Windows, DBMS, AD, network, identifying risks and recommending controls, and consulting clients on process and control design, with clear written and verbal communications to management.

Qualifications

• Bachelor’s degree in a related field is required.
• Experience in Information Security audit or risk management is advantageous.
• Cyber security certifications such as CEH/OSCP/GPEN/CPTE are advantageous.
• Good knowledge of Windows and Linux environments is preferred.

Responsibilities

• Lead/assist Information Security audits and risk management using multiple frameworks (PCI DSS v4.0, ISO/IEC 27001:2022, NIST, Cobit).
• Audit and risk on UNIX, Windows, DBMS, AD, AS/400, network and other technologies.
• Identify risks and recommend appropriate controls based on risk level and feasibility.
• Consult clients to improve processes and controls, and report findings to management.

Skills

Information security audit

Risk management

Windows & Linux

Communication skills

Certification awareness

Education

Bachelor’s Degree in Cyber Security, Computer Science, IT, System Engineering, or related field

Job description

• Lead/assist and participate in Information Security audit and Risk Management by using various Information Security framework (PCI DSS v4.0, ISO/IEC 27001:2022, NIST, Cobit and etc), including audit scoping, evaluation, testing, reporting and issue follow-up.
• Conduct audit and risk on various processes, technologies, and platforms, such as UNIX, Windows, DBMS (SQL, Oracle, DB2), AD, AS/400, Network and etc.
• Identify technology risks and recommend appropriate controls based on risk level, business requirements, and feasibility of implementation.
• Consult clients to evaluate and make recommendations on process and control design improvements.
• Prepare and deliver clear, concise and effective communication, both oral and written, to all levels of management.

Requirement

• Bachelor’s Degree in Cyber Security, Computer Science, IT, System Engineering, or any related field
• Having prior experience in any forms of Information Security audit, risk management or research is an advantage
• Possessing cyber security professional certification(s) such as CEH, OSCP, GPEN, CPTE, Lead Auditor or equivalent is an advantage
• Having sound knowledge and experience in Windows & Linux environments is an advantage
• Excellent communication skills, organizational skill, multitasking ability and great attention to details
• Ability to manage multiple tasks and projects with a calm demeanour and work under pressure
• Strong passion in Cyber Security and stays updated with emerging threats and news