Cyber GRC Senior: ISO 27001 & PCI-DSS Leader

Hytech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Public transport access

Insurance coverage (corporate)

Gym benefits

Training opportunities

Career growth projects

Job summary

Hytech, a leading management consulting firm with offices in Australia, Singapore and Malaysia, seeks a Cyber Security Governance Specialist in Kuala Lumpur. You will strengthen governance, risk and compliance frameworks and guide stakeholders on ISO 27001, NIST CSF and PCI-DSS, embedding GRC into operations.

You will develop risk registers, dashboards and policies, mentor junior analysts, and advise on regulatory changes, ensuring resilience and trust across the business.

Qualifications

• 3+ years in cyber-security, technology risk, or security consulting.
• Hands-on delivery of ISO 27001 and PCI-DSS certification projects.
• Experience guiding senior stakeholders through NIST CSF or equivalent reviews.
• Working knowledge of offensive-security methodologies to inform strategic risk decisions.
• Strong experience building risk registers, executive dashboards, and board reports.

Responsibilities

• Assess cyber-risk and control-maturity and translate findings into executive insights and roadmaps.
• Build and embed cyber-risk programmes: risk registers, treatment plans, dashboards.
• Develop policies, standards, and procedures that are compliant and practical for engineers.
• Own and maintain the GRC framework and policy stack; embed the three lines of defence.
• Guide stakeholders through audits and regulatory reviews (e.g., APRA CPS 234, SOC 2).
• Monitor regulatory changes and advise business stakeholders on impact within 30 days.
• Develop multi-year cyber-security and risk strategies aligned to corporate OKRs.
• Present risk posture, KPI/KRI trends, and investment options to boards and regulators.
• Mentor junior GRC analysts and upskill cross-functional teams on secure-by-design.

Skills

3+ years in cyber-security

Education

Master’s degree in Cybersecurity, Risk, Business, or MBA

CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor

Job description

Hytech, a leading management consulting firm with offices in Australia, Singapore and Malaysia, seeks a Cyber Security Governance Specialist in Kuala Lumpur. You will strengthen governance, risk and compliance frameworks and guide stakeholders on ISO 27001, NIST CSF and PCI-DSS, embedding GRC into operations.

You will develop risk registers, dashboards and policies, mentor junior analysts, and advise on regulatory changes, ensuring resilience and trust across the business.