Cyber Risk and Controls Officer

Hilti (Canada) Corporation; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Join Hilti as a key member of the Global Cyber Risk, Control & Assurance team in Kuala Lumpur. This role involves assessing cyber risks and ensuring compliance with standards while fostering a performance-oriented culture. You will contribute to Hilti's mission by managing IT and cyber risks and supporting digital transformation initiatives.

Benefits

Competitive rewards

Career development opportunities

Caring, performance-oriented culture

Recognized as a Great Place to Work 2024

Qualifications

• 2+ years experience in Cybersecurity, Cyber Risk, GRC, Compliance, Audit, or BCM.
• Fluency in English with excellent communication skills.
• Knowledge of risk frameworks and regulations.

Responsibilities

• Assist in assessing cyber risks and support IT audits.
• Conduct third-party risk assessments and monitor IT controls.
• Support operational resilience activities.

Skills

Analytical skills

Problem-solving

Communication

Education

Bachelor’s degree in Computer Science

Master’s degree (advantageous)

Tools

ISO27001 Lead Implementer

CISA

CRISC

Job description

What's the role?

You will be part of the Global Cyber Risk, Control & Assurance team and work with your Cyber Risk and Controls colleagues to proactively identify, evaluate, and manage IT & cyber risks at Hilti.

This is a full-time position available immediately.

What does the role involve?

You will assist the PO IT & Cyber Risk Management in assessing cyber risks and support internal and external IT audits. You will help maintain compliance with standards such as ISO27001, SOC2, and regulations including NIS2, CRA, AI Act, GDPR. Your responsibilities include conducting third-party risk assessments, monitoring IT controls, and supporting BCP and operational resilience activities to ensure continuous IT operations.

What you need is:

• Bachelor’s degree in computer science, software development, cybersecurity, risk management, or a related field; a Master’s degree is advantageous.
• At least 2+ years of experience in Cybersecurity, Cyber Risk, GRC, Compliance, Audit, or BCM.
• An entrepreneurial mindset, team player, analytical skills, and problem-solving abilities.
• Fluent in English (spoken and written) with excellent communication skills.
• Knowledge of risk frameworks (ISO, NIST, ISF SoGP) and regulations (NIS2, EUCRA, GDPR, AI Act).
• Experience with control assessments against standards like ISO27001, SOC2, and cyber regulations.
• Proven experience conducting cyber risk assessments, supporting IT and cyber audits, and assessing third parties.
• Preferred certifications include CISA, ISO27001 Lead Implementer, CRISC.

Why should you apply?

You believe cybersecurity is a business enabler and that digital transformation depends on managing IT & cyber risks. You can communicate these risks effectively to stakeholders and are interested in emerging threats and technological trends like AI and quantum computing. You enjoy conducting risk assessments and ensuring operational resilience.

What do we offer?

At Hilti, we foster a caring, performance-oriented culture. Recognized as a Great Place to Work 2024, we value care, performance, and innovation. We provide competitive rewards and career development opportunities to support your success.

Click here to learn more: Kuala Lumpur | Hilti Careers