EXECUTIVE - IT (CYBERSECURITY - TECHNOLOGY GOVERNANCE & RESILIENCE) (EG07)

HARTALEGA; Petaling Jaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

Hartalega Holdings Berhad is seeking an Executive - IT (Cybersecurity - Technology Governance & Resilience) to lead governance and compliance initiatives. You will develop policies, coordinate audits, and report risk from security controls.

Ideal candidates have a degree in IT/cybersecurity, familiarity with ISO 27001/NIST, and experience with audit processes. Fresh graduates are welcome, with a strong grasp of CIA and documentation skills.

Qualifications

• Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Fresh graduate or minimum 1 year of IT/cybersecurity experience, with exposure to audit processes or policy management.
• Solid understanding of CIA triad (Confidentiality, Integrity, Availability).
• Knowledge of IT audit and compliance concepts, including awareness of governance frameworks such as ISO 27001 or NIST.
• Proficiency in Microsoft Office (Excel, Word, PowerPoint) for developing and maintaining structured documentation and technical reports.

Responsibilities

• Author and maintain cybersecurity policies, standards, and procedures to align with internal security requirements and governance frameworks.
• Audit compliance adherence by monitoring cybersecurity controls against regulatory and internal organizational requirements.
• Quantify risk data and perform analytical reviews to track cybersecurity assessments, audit findings, and mitigation progress.
• Catalog cybersecurity governance documentation, including frameworks, guidelines, audit records, and formal regulatory submissions.
• Orchestrate audit preparation by compiling evidence, reviewing technical documentation, and tracking follow-up remediation actions.
• Administer cybersecurity awareness programs by managing training records, participation metrics, and official governance communications.
• Disseminate internal governance initiatives and policy updates to ensure organizational awareness of compliance requirements.
• Identify and report compliance gaps by monitoring the implementation status of mandatory cybersecurity control requirements.
• Produce structured governance reports and compliance summaries for executive review and senior management oversight.
• Execute specialized governance tasks and tactical compliance assignments as directed by the reporting manager.

Skills

CIA triad understanding

IT audit concepts

ISO 27001/NIST awareness

Microsoft Office proficiency

Policy management familiarity

Education

Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or a related field

Job description

EXECUTIVE - IT (CYBERSECURITY - TECHNOLOGY GOVERNANCE & RESILIENCE) (EG07)

Company Overview

Leading Growth Through Innovation

As the World's No.1 Nitrile Glove manufacturer, Hartalega is currently in the process of recruiting a diverse pool of talented people, across various specialisations and backgrounds. You will enjoy exceptional benefits and incentives, as well as a well-defined path for career success.

Hartalega is made up of a tight-knit, passionate and highly-skilled set of individuals. From our top executives, to our line technicians; we are all proud to be part of an elite group responsible for revolutionising the glove-making industry.

Job Description

Job Purpose

Execute cybersecurity governance and compliance initiatives by managing policy implementation, risk documentation, and audit coordination.

Deliver comprehensive regulatory support to guarantee organizational adherence to established cybersecurity frameworks and industry standards.

Responsibilities

• 1. Author and maintain cybersecurity policies, standards, and procedures to align with internal security requirements and governance frameworks.
• 2. Audit compliance adherence by monitoring cybersecurity controls against regulatory and internal organizational requirements.
• 3. Quantify risk data and perform analytical reviews to track cybersecurity assessments, audit findings, and mitigation progress.
• 4. Catalog cybersecurity governance documentation, including frameworks, guidelines, audit records, and formal regulatory submissions.
• 5. Orchestrate audit preparation by compiling evidence, reviewing technical documentation, and tracking follow-up remediation actions.
• 6. Administer cybersecurity awareness programs by managing training records, participation metrics, and official governance communications.
• 7. Disseminate internal governance initiatives and policy updates to ensure organizational awareness of compliance requirements.
• 8. Identify and report compliance gaps by monitoring the implementation status of mandatory cybersecurity control requirements.
• 9. Produce structured governance reports and compliance summaries for executive review and senior management oversight.
• 10. Execute specialized governance tasks and tactical compliance assignments as directed by the reporting manager.

Qualification and Experience

• 1. Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• 2. Fresh graduate or minimum 1 year of experience in IT/cybersecurity, with preferred exposure to audit processes or policy management.
• 3. Solid understanding of core cybersecurity principles, specifically the Confidentiality, Integrity, and Availability (CIA) triad.
• 4. Knowledge of IT audit and compliance concepts, including awareness of governance frameworks such as ISO 27001 or NIST.
• 5. Proficiency in Microsoft Office (Excel, Word, PowerPoint) for developing and maintaining structured documentation and technical reports.