Cyber Security Program Manager ISMS & Risk

WorleyParsons; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Worley seeks a Manager I, Cyber Security to join our Malaysia team. You will lead security risk management, maintain ISMS, and coordinate audits while partnering with Procurement, Legal, Privacy, and business units across geographies.

The role requires extensive information security experience and relevant certifications, with a focus on continuous improvement and resilient cyber practices for a global energy projects organization.

Qualifications

• Certifications such as – CISM, CRISC, ISO27001 Lead Auditor, ISO42001 Lead Auditor, CISSP, CISA
• 10+ years of experience in information security or information technology.

Responsibilities

• 2nd Line of Defence in IIA Three Lines of Defence Model.
• Lead the supplier information security risk management program, including security assessments, assurance reviews, remediation oversight, and ongoing monitoring of third-party security risks.
• Collaborate with Procurement, Legal, Privacy, Digital, and business stakeholders to ensure information security requirements are embedded within supplier onboarding processes, contractual arrangements, and business operations.
• Manage and continuously enhance the Information Security Management System (ISMS), including maintaining ISO/IEC 27001 certification, coordinating internal and external audits, overseeing corrective actions, and ensuring ongoing compliance with certification requirements.
• Own and administer the Digital Risk Register and Information Security Risk Register, including facilitating risk identification, assessment, treatment, monitoring, reporting, and periodic review in alignment with enterprise risk management requirements.
• Conduct and facilitate information security risk assessments, including the evaluation of proposed deviations from security standards, policies, and control requirements.
• Coordinate and support internal and external audits, certification activities, customer security assurance requests, and regulatory reviews.
• Lead, coach, and develop team members while ensuring delivery of operational objectives, continuous improvement initiatives, and strategic program outcomes.

Skills

Security risk management

ISMS / ISO 27001

Stakeholder engagement

Policy & standards

Cybersecurity frameworks

Vendor risk management

Education

Bachelor's degree in IT/Computing

Tools

MS Visio

MS SharePoint

Job description

Worley seeks a Manager I, Cyber Security to join our Malaysia team. You will lead security risk management, maintain ISMS, and coordinate audits while partnering with Procurement, Legal, Privacy, and business units across geographies.

The role requires extensive information security experience and relevant certifications, with a focus on continuous improvement and resilient cyber practices for a global energy projects organization.