Cyber Risk and Controls Officer

Hilti (Canada) Corporation; Kuala Lumpur; On-site; MYR 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a Cyber Risk and Controls Officer to join their Global Cyber Risk team in Kuala Lumpur. This role involves proactively identifying and managing IT and cyber risks while ensuring compliance with international standards and regulations. You will engage in assessing cyber threats and trends, support audits, and contribute to operational resilience initiatives. If you are passionate about cybersecurity as a business enabler and wish to make a significant impact in a performance-oriented culture, this opportunity is perfect for you.

Benefits

Competitive rewards

Career development opportunities

Great Place to Work recognition

Qualifications

• 2+ years of experience in Cybersecurity, Cyber Risk, or Compliance.
• Familiarity with risk frameworks and regulations like GDPR and NIS2.

Responsibilities

• Support IT & Cyber Risk Management in assessing cyber risks.
• Conduct third-party risk assessments and monitor IT controls.

Skills

Cybersecurity

Cyber Risk Management

Compliance

Audit

Problem-solving

Analytical Skills

Communication Skills

Education

Bachelor’s degree in Computer Science

Master’s degree in a related discipline

Tools

ISO27001

SOC2

NIST

ISF SoGP

Job description

What's the role?

You will be part of the Global Cyber Risk, Control & Assurance team and work alongside fellow Cyber Risk and Controls Officers to proactively identify, evaluate, and manage IT & cyber risks at Hilti.

What does the role involve?

Your responsibilities include supporting the PO IT & Cyber Risk Management in assessing cyber risks, assisting during internal and external IT audits, maintaining compliance with standards such as ISO27001 and SOC2, ensuring adherence to regulations like NIS2, CRA, AI Act, GDPR, conducting third-party risk assessments, monitoring IT controls, and supporting BCP and operational resilience activities to ensure uninterrupted IT operations.

What you need is:

• Bachelor’s degree in computer science, software development, cybersecurity, risk management, or a related discipline; a Master’s degree is an advantage.
• At least 2 years of experience in Cybersecurity, Cyber Risk, GRC, Compliance, Audit, or BCM.
• An entrepreneurial mindset, team player, analytical skills, and problem-solving abilities.
• Fluent in English (verbal and written) with excellent communication skills.
• Familiarity with risk frameworks (ISO, NIST, ISF SoGP) and regulations (NIS2, EUCRA, GDPR, AI Act).
• Experience with control assessments against standards like ISO27001 and SOC2, and cyber regulations.
• Proven experience conducting cyber risk assessments, supporting IT and cyber audits, and assessing third parties.
• Preferred certifications include CISA, ISO27001 Lead Implementer, CRISC.

Why should you apply?

If you believe cybersecurity is a business enabler and understand the importance of communicating cyber risks effectively to stakeholders, this role is for you. You will explore new cyber threats and technological trends such as AI and quantum computing, assess risks associated with technology, processes, and vendors, and ensure operational resilience.

What do we offer?

Hilti fosters a caring, performance-oriented culture recognized as a Great Place to Work 2024. We provide competitive rewards and comprehensive career development opportunities. Click here to learn more: Kuala Lumpur | Hilti Careers