Governance, Risk & Compliance (GRC) Analyst

Brooks Automation US; Malaysia; On-site; MYR 60,000 - 100,000; Full time

Job summary

Brooks Automation US is seeking a Governance, Risk & Compliance (GRC) Analyst to drive the ISMS, regulatory readiness, and customer security requirements. You will collaborate with the CISO and stakeholders across IT, Legal, HR, and Operations to strengthen Brooks' security posture.

This onsite role in Malaysia involves translating frameworks into actionable processes, coordinating audits, and supporting governance initiatives to enable business growth.

Qualifications

• 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline.
• Working knowledge of information security principles and controls.
• Experience supporting compliance initiatives or audits.
• Strong written communication and documentation skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong organizational skills and attention to detail.
• Ability to manage multiple projects and deadlines simultaneously.

Responsibilities

• Support and maintain ISO 27001 ISMS.
• Coordinate internal and external audits and surveillance activities.
• Assist with policy development, reviews, standards, procedures, and governance documentation.
• Maintain evidence repositories and audit readiness documentation.
• Coordinate remediation tracking and corrective action plans.
• Facilitate cybersecurity risk assessments and maintain risk registers.
• Support management reporting, metrics, and risk dashboards.
• Respond to customer security questionnaires and due diligence requests.
• Assist with regulatory and customer requirements including ISO 27001, NIST CSF, GDPR, and CRA.
• Collaborate with Legal and business stakeholders on security-related contractual requirements.
• Coordinate annual security awareness training campaigns and phishing simulations.
• Assist with incident governance and lessons learned.

Skills

Governance & Compliance

Information Security

Audits & Compliance

Stakeholder communication

Documentation

Project management

Job description

Brooks is a leading provider of automation solutions with over 40 years of experience in the semiconductor industry, offering precision robotics, integrated automation systems, and contamination control solutions that empower chip manufacturers worldwide. Our product portfolio includes a range of automation solutions, including robots, vacuum systems, and atmospheric robots for semiconductor manufacturing ( www.brooks.com ).

Are you looking for a place where you can be part of a transformation? Join us at Brooks Automation and be a part of a dynamic organization that is shaping the future of technology.

Governance, Risk & Compliance (GRC) Analyst

Job Description

About the Role:

Brooks Automation is a rapidly growing technology leader in automation solutions serving the Semiconductor and Laboratory Automation industries worldwide. Our customers include some of the world's largest and most security-conscious technology manufacturers. As Brooks continues to expand its information security, compliance, and governance programs, we are seeking a highly motivated Governance, Risk & Compliance (GRC) Analyst to join our Information Security team.

This role will help drive Brooks' information security management system (ISMS), regulatory readiness efforts, customer cybersecurity requirements, supplier security assurance activities, and governance initiatives. The successful candidate will work directly with the CISO and business stakeholders across IT, Engineering, Product, Legal, HR, Operations, and Quality to strengthen Brooks' security and compliance posture.

This is not a checkbox compliance role. We are looking for a practitioner who can translate frameworks and requirements into operational processes that improve security outcomes while enabling the business.

Work Location: ONSITE - Johor Bahru (OR) Penang.

Key Responsibilities

Governance & Compliance

• Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS)


• Coordinate internal audits, external audits, surveillance audits, and certification activities


• Assist with policy development, policy reviews, standards, procedures, and governance documentation


• Maintain control ownership, evidence repositories, and audit readiness documentation


• Coordinate remediation tracking and corrective action plans

Risk Management

• Facilitate cybersecurity risk assessments and business impact discussions


• Maintain risk registers and assist control owners with mitigation planning


• Track risk treatment plans and exceptions


• Support management reporting, metrics, and risk dashboards

Customer & Regulatory Assurance

• Respond to customer security questionnaires and due diligence requests


• Support supplier and third-party security reviews


• Assist with regulatory and customer requirements including: ISO 27001


• NIST Cybersecurity Framework


• NIST 800-171


• GDPR


• Cyber Resilience Act (CRA)


• Semiconductor customer security requirements

Partner with Legal and business stakeholders on security-related contractual requirements

Security Awareness & Training

• Coordinate annual security awareness training campaigns


• Manage phishing simulation programs


• Track participation and compliance metrics


• Develop security awareness communications and educational materials

Incident & Operational Governance

• Support incident management governance activities


• Ensure incidents are properly documented and tracked


• Assist with lessons learned and corrective action reviews


• Help maintain security program documentation, standards, procedures, and evidence libraries

Program Operations

• Support Security Council activities and management reviews


• Develop metrics, dashboards, and executive reporting


• Assist with annual policy reviews and governance initiatives


• Drive continuous improvement activities across the security program

Required Qualifications:

• 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline


• Working knowledge of information security principles and controls


• Experience supporting compliance initiatives or audits


• Strong written communication and documentation skills


• Ability to communicate effectively with both technical and non-technical stakeholders


• Strong organizational skills and attention to detail


• Ability to manage multiple projects and deadlines simultaneously

Preferred Qualifications:

• Experience with ISO 27001


• Experience supporting SOC, SOX, or regulatory audits


• Experience with customer security questionnaires


• Knowledge of NIST CSF, NIST 800-171, GDPR, or CRA


• Experience with third-party risk management


• Security certifications such as: Security+


• ISO 27001 Internal Auditor


• ISO 27001 Lead Auditor


• CRISC


• CISA


• CISSP (Associate or Full)

What Success Looks Like:

• Within your first year you will:


• Become a key contributor to Brooks' ISO 27001 program


• Successfully support surveillance and recertification audits


• Help maintain audit readiness across the security program


• Increase efficiency and consistency of