Global ISMS Compliance Lead – APAC

InfoSec; Kuala Lumpur; On-site; MYR 100,000 - 167,000; Full time

Job summary

Monks is seeking an Information Security Compliance Analyst to guard data and ensure adherence to regulations. You will steer risks and drive security controls across the APAC region, aligning with ISO27001:2022 and global roadmaps.

Working within the Global Infosec Team, you will collaborate with stakeholders worldwide, manage third party risk assessments, and support audits and awareness initiatives while continuously evolving the security posture for Monks.

Qualifications

• Bachelor’s degree in Computer Science, Computer or Systems Engineering or equivalent.
• Minimum of 5 years of experience in InfoSec related positions.
• Solid knowledge of security on networking, cloud, infrastructure configuration, end-point protection and SDLC.
• Knowledge of ISO 27001/2, SOC2, NIST-800 standards.
• Professional working proficiency in written and spoken English.
• Ability to present findings to those with either a technical or non-technical background.
• Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.
• Ability to self-organize and plan activities with commitment towards results.

Responsibilities

• Lead the alignment to the global ISMS (based on ISO27001:2022) over the APAC region.
• Integrate the compliance efforts in the region with the global roadmap.
• Perform routine activities to evaluate compliance with security frameworks and legislation.
• Report the compliance status of processes and technology in the region.
• Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company’s operations.
• Define security measures to lower the risks identified.
• Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organization security and legal compliance.
• Coordinate the information security assessments with 3rd parties (clients, suppliers).
• Contribute in the development of awareness material and the process of delivery and measurement.
• Coordinate and reply to internal and external audits related to information security.
• Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end-point protection, network security, security and vulnerabilities assessment).
• Empower, assist, and mentor fellow members of the team to foster their professional growth and ensure collective success.

Skills

Networking security

Cloud security

End-point protection

SDLC

Risk assessment

Audits & compliance

Stakeholder communication

Problem-solving

Time management

English proficiency

Education

Bachelor’s degree in Computer Science or related field

Job description

Monks is seeking an Information Security Compliance Analyst to guard data and ensure adherence to regulations. You will steer risks and drive security controls across the APAC region, aligning with ISO27001:2022 and global roadmaps.

Working within the Global Infosec Team, you will collaborate with stakeholders worldwide, manage third party risk assessments, and support audits and awareness initiatives while continuously evolving the security posture for Monks.