Cyber Security Analyst II - Audit & Compliance Lead

WorleyParsons; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Benefits offered by this job

Online learning platform

Global role with time-zone flexibility

Competitive remuneration

Job summary

Worley is seeking a Cyber Security Analyst II for its Malaysia team to support cybersecurity compliance audits and risk assessments. The role focuses on strengthening controls, aligning with NIST CSF, ISO 27001, and COBIT, while coordinating with internal and external stakeholders to improve Worley’s security posture.

The ideal candidate has strong IS audit experience, preferably in professional services or IT internal audit, and relevant certifications (CIA/CISA/CISSP/CRISC).

Qualifications

• Experience in information systems audit or IS assurance.
• Familiarity with security frameworks (NIST CSF, ISO27001, COBIT).
• Ability to partner with stakeholders across IT and business.
• Experience with control assessments and remediation actions.

Responsibilities

• Serve as 2nd line of defense for Worley Digital.
• Conduct control assessments for security frameworks and external standards.
• Prepare monthly status reports on control assessments.
• Collaborate with cross-functional teams to remediate control gaps.
• Support audit facilitation, certifications, and supplier risk activities.

Skills

Security controls

IS auditing

Stakeholder collaboration

Risk assessments

NIST CSF

ISO27001

COBIT

Attention to detail

Education

CIA certification

CISA

CISSP

Tools

MS Office

MS Visio

MS SharePoint

Job description

Worley is seeking a Cyber Security Analyst II for its Malaysia team to support cybersecurity compliance audits and risk assessments. The role focuses on strengthening controls, aligning with NIST CSF, ISO 27001, and COBIT, while coordinating with internal and external stakeholders to improve Worley’s security posture.

The ideal candidate has strong IS audit experience, preferably in professional services or IT internal audit, and relevant certifications (CIA/CISA/CISSP/CRISC).