Governance, Risk & Compliance (GRC) Analyst

Brooks Laboratory Automation Solutions; Johor; On-site; MYR 120,000 - 180,000; Full time

Job summary

Brooks Automation is seeking a Governance, Risk & Compliance (GRC) Analyst to advance our ISMS, regulatory readiness, and customer security posture. You will work with the CISO and stakeholders across IT, Legal, HR, and Quality to translate frameworks into operational controls and measurable improvements.

The role requires hands-on experience with ISO 27001, audits, and various regulatory requirements, including NIST CSF, GDPR, and CRA.

Qualifications

• Experience with ISO 27001 and audits.
• Knowledge of regulatory frameworks (SOC, SOX, GDPR, CRA).
• Ability to translate requirements into practical security processes.

Responsibilities

• Maintain Brooks' ISO 27001 ISMS and support audits.
• Coordinate audits, certifications, and surveillance activities.
• Develop and review security policies, standards, and governance docs.
• Manage risk registers, remediation tracking, and action plans.
• Support security metrics, reporting, and dashboards.
• Guide responses to customer security questionnaires and third-party due diligence.

Skills

ISO 27001 knowledge

Audit support

Regulatory compliance

Risk assessment

Education

Security+

ISO 27001 Internal Auditor

ISO 27001 Lead Auditor

CRISC

CISA

CISSP (Associate or Full)

Job description

Governance, Risk & Compliance (GRC) Analyst Job Description

Brooks is a leading provider of automation solutions with over 40 years of experience in the semiconductor industry, offering precision robotics, integrated automation systems, and contamination control solutions that empower chip manufacturers worldwide. Our product portfolio includes a range of automation solutions, including robots, vacuum systems, and atmospheric robots for semiconductor manufacturing (www.brooks.com).

Are you looking for a place where you can be part of a transformation? Join us at Brooks Automation and be a part of a dynamic organization that is shaping the future of technology.

About the Role: Brooks Automation is a rapidly growing technology leader in automation solutions serving the Semiconductor and Laboratory Automation industries worldwide. Our customers include some of the world's largest and most security-conscious technology manufacturers. As Brooks continues to expand its information security, compliance, and governance programs, we are seeking a highly motivated Governance, Risk & Compliance (GRC) Analyst to join our Information Security team. This role will help drive Brooks' information security management system (ISMS), regulatory readiness efforts, customer cybersecurity requirements, supplier security assurance activities, and governance initiatives. The successful candidate will work directly with the CISO and business stakeholders across IT, Engineering, Product, Legal, HR, Operations, and Quality to strengthen Brooks' security and compliance posture. This is not a checkbox compliance role. We are looking for a practitioner who can translate frameworks and requirements into operational processes that improve security outcomes while enabling the business.

Work Location: ONSITE - Johor Bahru (OR) Penang.

Key Responsibilities:

• Governance & Compliance Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS)
• Coordinate internal audits, external audits, surveillance audits, and certification activities
• Assist with policy development, policy reviews, standards, procedures, and governance documentation
• Maintain control ownership, evidence repositories, and audit readiness documentation
• Coordinate remediation tracking and corrective action plans
• Risk Management
• Facilitate cybersecurity risk assessments and business impact discussions
• Maintain risk registers and assist control owners with mitigation planning
• Track risk treatment plans and exceptions
• Support management reporting, metrics, and risk dashboards
• Customer & Regulatory Assurance
• Respond to customer security questionnaires and due diligence requests
• Support supplier and third-party security reviews
• Assist with regulatory and customer requirements including: ISO 27001 NIST Cybersecurity Framework NIST 800-171 GDPR Cyber Resilience Act (CRA) Semiconductor customer security requirements
• Partner with Legal and business stakeholders on security-related contractual requirements
• Security Awareness & Training
• Coordinate annual security awareness training campaigns
• Manage phishing simulation programs
• Track participation and compliance metrics
• Develop security awareness communications and educational materials
• Incident & Operational Governance
• Support incident management governance activities
• Ensure incidents are properly documented and tracked
• Assist with lessons learned and corrective action reviews
• Help maintain security program documentation, standards, procedures, and evidence libraries
• Program Operations
• Support Security Council activities and management reviews
• Develop metrics, dashboards, and executive reporting
• Assist with annual policy reviews and governance initiatives
• Drive continuous improvement activities across the security program

Preferred Qualifications:

• Experience with ISO 27001
• Experience supporting SOC, SOX, or regulatory audits
• Experience with customer security questionnaires
• Knowledge of NIST CSF, NIST 800-171, GDPR, or CRA
• Experience with third-party risk management
• Security certifications such as: Security+ ISO 27001 Internal Auditor ISO 27001 Lead Auditor CRISC CISA CISSP (Associate or Full)

What Success Looks Like:

• Within your first year you will:
• Become a key contributor to Brooks' ISO 27001 program
• Successfully support surveillance and recertification audits
• Help maintain audit readiness across the security program
• Increase efficiency and consistency of customer security assessments
• Improve governance visibility through reporting and metrics
• Help mature Brooks' risk management and compliance practices

Why This Role Exists:

Demand for cybersecurity governance and customer assurance continues to increase. Brooks now supports a growing number of customer security reviews, supplier assessments, audits, regulatory requirements, and governance activities. At the same time, the organization is preparing for increased regulatory scrutiny and public-company style compliance expectations. We do not need someone who can simply quote compliance frameworks. We need someone who can take ownership of governance activities, keep the program moving forward, engage stakeholders across the company, and help turn compliance requirements into measurable security improvements. This role is central to maintaining Brooks' ISO 27001 certification, supporting customer trust, and scaling the security program as the business grows.

Work Location & Flexibility

At Brooks, we aim to foster a collaborative and engaging environment while offering flexibility where possible. Work arrangements may include a mix of in-office and remote work, depending on the nature of the role and business needs. Specific expectations will be shared during the interview process.

Brooks is committed to fostering a diverse and inclusive workplace and proudly serves as an equal-opportunity employer.

We welcome all qualified applicants regardless of race, color, religion, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other legally protected characteristics.

Diversity enhances our innovative capabilities and strengthens our ability to serve our customers and communities effectively.

At Brooks Automation, we celebrate the unique experiences and perspectives each individual brings, believing they are essential to our collective success.

Join us in building a workplace where every team member is valued and can thrive.

For applicants with disabilities requiring accommodations, don't hesitate to get in touch with [e-mail] or call [phone] to discuss your needs.

Review EEO Law & EEO Statement.

Since our founding in 1978, Brooks Automation has been a leading automation provider and trusted partner to the global manufacturing industry. Our customers choose the Brooks Automation platform because we consistently deliver best-in-class reliability and cost of ownership, with a solution that is optimized for value within their application. We deliver value through our understanding of the application challenge, providing solutions at scale that create an automated advantage for our customers. This benefits our customers with improved throughput and yield and a lower cost of ownership.